cloudq 发表于 2004-8-27 12:23:45

最近买了一些新的网卡,,重新安装JUnos,大家有什么问题可以来讨论junos最好要在质量好一些的82557 558 559上装有些质量差的接口起不来。。还有就是最好用freebsd4.7 4.8 4.9mini都可以5.2没研究过。。因为5.2中设备都改名了。。

cloudq 发表于 2004-8-27 12:28:19

目前正常使用没有问题。。但是nat策略似乎不起作用。。。。。。。。呵呵。。。ids state-firewall还没有测试。。mpls没有环境。。呵呵。。

smile787 发表于 2004-8-27 12:41:25

6.2你的起来了吗?5.4的就可以使用。我都是用的inter的好卡

windmail 发表于 2004-8-27 16:22:00

请问:在那里可以下载?有license吗?急切加入!硬件都准备好了!

cloudq 发表于 2004-8-27 17:46:49

6。2起来了。。没有问题。。安装后会报一大堆错误。。没有关系commit一下就ok了。。。junos不要lic的。。。

smile787 发表于 2004-8-27 18:08:32

QUOTE (windmail @ Aug 27 2004, 04:22 PM)
请问:在那里可以下载?有license吗?急切加入!硬件都准备好了!
论坛的ftp里有,既然cloud兄弟说6.2的可以起来,那么直接用6.2的来玩吧。。。我也就装了一次6.2,可以那里有问题。。。就是没什么时间去玩。

cloudq 发表于 2004-8-28 08:30:25

好像是6.2默认安装之后由于默认配置里面好像有许多export版本不支持的东西。。所以会报错。。你随便confiugre然后commit rebooot就不会有问题了。。。但是6.2目前还存在一些现实的问题。。。。。。。我配置了set service ids xxxset service nat xxxxset service state-firewall (具体命令可能有出入,我记不清楚了)似乎都没有起作用。。。经过研究junos的技术资料发现fxp口在juniper的设备里面都是manager port真正的fastethernet口不叫fxp所以当你用set interface 命令的时候会发现fxp口没有service 功能set service service-set interface-xxxx 也不能用fxp所以nat ids state-firewall很可能不能做。。也就是说策略上你做了。。但是无法应用到接口。。。这个可能和我用的junos版本有问题。。。。我的show ver之后只有非常少的几个东西。。呵呵。。。。大家有什么发现告诉我呀。。。不过bgp isis mpls,等等高端功能可能没有问题logic-router 也能用。。。具体我会继续测试的。。。。继续讨论

cloudq 发表于 2004-8-28 08:33:45

看下面的不同Configure the Management Ethernet Interface The routing platform's management Ethernet interface, fxp0, is an out-of-band management interface. You must configure an IP address and prefix length for this interface, which you commonly do when you first install the JUNOS software: user@host# set interfaces fxp0 unit 0 family inet address/prefix-lengthuser@host# showinterfaces {    fxp0 {      unit 0 {            family inet {                address/prefix-length;            }      }    }}Configure Ethernet Physical Interface Properties To configure Fast Ethernet-specific physical interface properties, include the fastether-options statement at the hierarchy level: link-mode (full-duplex | half-duplex);speed (10m | 100m);vlan-tagging;fastether-options {    802.3ad aex;   (flow-control | no-flow-control);    ingress-rate-limit rate;    (loopback | no-loopback);    source-address-filter {      mac-address;    }    (source-filtering | no-source-filtering);} The statement speed (10m | 100m) applies only to the management Ethernet interface (fxp0) and to the Fast Ethernet 12-port and 48-port PICs. The 4-port and 8-port Fast Ethernet PICs support a speed of 100 Mbps only.

smile787 发表于 2004-8-28 08:50:50

所言极是,少了多口the Fast Ethernet 12-port and 48-port PICs. The 4-port and 8-port Fast Ethernet PICs support a speed of 100 Mbps only.

cloudq 发表于 2004-8-28 11:57:05

大家别嫌我粘贴的多,,多看这些东西有好处的。。。网吧那些小哥们可能看不下去。。喜欢juniper的朋友可以贴出你们的输出。。。互相研究一下究竟作为fxp的管理口能够应用junos多少的功能root--- JUNOS 6.2R2.4 built 2004-03-19 13:39:35 UTCTerminal type? root@M40# show logical-routers M10 {    interfaces {      fxp2 {            unit 1 {                family inet {                  address 172.16.100.1/24;                }            }      }    }}root@M40# show ver                  ^syntax error.root@M40# show ver                     ^syntax error.root@M40# run show version Hostname: M40Model: oliveJUNOS Base OS boot JUNOS Base OS Software Suite JUNOS Kernel Software Suite JUNOS Packet Forwarding Engine Support (M20/M40) JUNOS Routing Software Suite JUNOS Online Documentation root@M40# exit Exiting configuration moderoot@M40> q   request system                                              show interfaces Physical interface: dsc, Enabled, Physical link is UpInterface index: 5, SNMP ifIndex: 5Type: Software-Pseudo, MTU: UnlimitedDevice flags   : Present RunningInterface flags: SNMP-TrapsLink flags   : NoneLast flapped   : NeverInput packets : 0   Output packets: 0Physical interface: fxp0, Enabled, Physical link is DownInterface index: 1, SNMP ifIndex: 1Type: Ethernet, Link-level type: Ethernet, MTU: 1514, Speed: 10mDevice flags   : Present Running No-CarrierInterface flags: Hardware-Down SNMP-TrapsLink type      : Half-DuplexCurrent address: 00:20:35:e7:c7:67, Hardware address: 00:20:35:e7:c7:67Last flapped   : NeverInput packets : 0   Output packets: 0Logical interface fxp0.0 (Index 64) (SNMP ifIndex 13)   Flags: Device-Down SNMP-Traps Encapsulation: ENET2---(more)---                        Bandwidth: 0Input packets : 0   Output packets: 0    Protocol inet, MTU: 1500      Flags: Is-Primary      Addresses, Flags: Dest-route-down Is-Default Is-Preferred Is-Primary      Destination: 10.37.144/21, Local: 10.37.144.132,      Broadcast: 10.37.151.255Physical interface: fxp1, Enabled, Physical link is DownInterface index: 2, SNMP ifIndex: 2Type: Ethernet, Link-level type: Ethernet, MTU: 1514, Speed: 10mDevice flags   : Present Running No-CarrierInterface flags: Hardware-Down SNMP-TrapsLink type      : Half-DuplexCurrent address: 00:20:35:e7:b2:b1, Hardware address: 00:20:35:e7:b2:b1Last flapped   : NeverInput packets : 0   Output packets: 0Logical interface fxp1.0 (Index 65) (SNMP ifIndex 14)   Flags: Device-Down SNMP-Traps Encapsulation: ENET2    Bandwidth: 0---(more 29%)---                      Input packets : 0   Output packets: 0    Protocol inet, MTU: 1500      Flags: None      Addresses, Flags: Dest-route-down Is-Preferred Is-Primary      Destination: 192.168.1/24, Local: 192.168.1.200,      Broadcast: 192.168.1.255Physical interface: fxp2, Enabled, Physical link is DownInterface index: 3, SNMP ifIndex: 3Type: Ethernet, Link-level type: Ethernet, MTU: 1514, Speed: 10mDevice flags   : Present Running No-CarrierInterface flags: Hardware-Down SNMP-TrapsLink type      : Half-DuplexCurrent address: 00:20:35:e7:b2:b6, Hardware address: 00:20:35:e7:b2:b6Last flapped   : NeverInput packets : 0   Output packets: 0Logical interface fxp2.0 (Index 66) (SNMP ifIndex 15)   Flags: Device-Down SNMP-Traps Encapsulation: ENET2    Bandwidth: 0Input packets : 0 ---(more 44%)---                      Output packets: 0    Protocol inet, MTU: 1500      Flags: None      Addresses, Flags: Dest-route-down Is-Preferred Is-Primary      Destination: 221.215.40.32/30, Local: 221.215.40.34,      Broadcast: 221.215.40.35Physical interface: gre, Enabled, Physical link is UpInterface index: 129, SNMP ifIndex: 8Type: GRE, Link-level type: GRE, MTU: Unlimited, Speed: UnlimitedDevice flags   : Present RunningInterface flags: Point-To-Point SNMP-TrapsInput packets : 0   Output packets: 0Physical interface: ipip, Enabled, Physical link is UpInterface index: 130, SNMP ifIndex: 9Type: IPIP, Link-level type: IP-over-IP, MTU: Unlimited, Speed: UnlimitedDevice flags   : Present RunningInterface flags: SNMP-TrapsInput packets : 0   Output packets: 0---(more 59%)---                  Physical interface: lo0, Enabled, Physical link is UpInterface index: 6, SNMP ifIndex: 6Type: Loopback, MTU: UnlimitedDevice flags   : Present Running LoopbackInterface flags: SNMP-TrapsLink flags   : NoneLast flapped   : NeverInput packets : 0   Output packets: 0Logical interface lo0.16383 (Index 68) (SNMP ifIndex 22)   Flags: SNMP-Traps Encapsulation: UnspecifiedInput packets : 0   Output packets: 0    Protocol inet, MTU: Unlimited      Flags: NonePhysical interface: lsi, Enabled, Physical link is UpInterface index: 4, SNMP ifIndex: 4Type: Software-Pseudo, Link-level type: LSI, MTU: 1496, Speed: UnlimitedDevice flags   : Present RunningInterface flags: SNMP-TrapsLink flags   : None---(more 74%)---                      Last flapped   : NeverInput packets : 0   Output packets: 0Physical interface: mtun, Enabled, Physical link is UpInterface index: 133, SNMP ifIndex: 12Type: Multicast-GRE, Link-level type: GRE, MTU: Unlimited, Speed: UnlimitedDevice flags   : Present RunningInterface flags: SNMP-TrapsInput packets : 0   Output packets: 0Physical interface: pimd, Enabled, Physical link is UpInterface index: 132, SNMP ifIndex: 11Type: PIMD, Link-level type: PIM-Decapsulator, MTU: Unlimited,Speed: UnlimitedDevice flags   : Present RunningInterface flags: SNMP-TrapsInput packets : 0   Output packets: 0Physical interface: pime, Enabled, Physical link is UpInterface index: 131, SNMP ifIndex: 10---(more 89%)---                      Type: PIME, Link-level type: PIM-Encapsulator, MTU: Unlimited,Speed: UnlimitedDevice flags   : Present RunningInterface flags: SNMP-TrapsInput packets : 0   Output packets: 0Physical interface: tap, Enabled, Physical link is UpInterface index: 128, SNMP ifIndex: 7Type: Software-Pseudo, Link-level type: Interface-Specific, MTU: Unlimited,Speed: UnlimitedDevice flags   : Present RunningInterface flags: SNMP-TrapsLink flags   : NoneLast flapped   : NeverInput packets : 0   Output packets: 0root@M40> show interfaces terse Interface               Admin Link Proto Local               Remotedsc                     up    upfxp0                  up    downfxp0.0                  up    down inet10.37.144.132/21fxp1                  up    downfxp1.0                  up    down inet192.168.1.200/24fxp2                  up    downfxp2.0                  up    down inet221.215.40.34/30gre                     up    upipip                  up    uplo0                     up    uplo0.16383               up    up   inet lsi                     up    upmtun                  up    uppimd                  up    uppime                  up    uptap                     up    uproot@M40> conft          ^unknown command.root@M40> configure Entering configuration moderoot@M40# set interfaces fx0   p1 unit 0 ?Possible completions:            Execute this commandaccounting-profile   Accounting profile name+ apply-groups         Groups from which to inherit configuration data+ apply-groups-exceptDon't inherit configuration data from these groupsbandwidth            Logical unit bandwidth (informational only)description          Text description of the interfacedisable            Disable this logical interfaceencapsulation      Logical link-layer encapsulation> family               Protocol familyno-traps             Don't enable SNMP notifications on state changespassive-monitor-modeUse interface to tap packets from another routertraps                Enable SNMP notifications on state changesvlan-id            Virtual LAN identifier value for 802.1Q VLAN tags|                  Pipe through a commandroot@M40# set interfaces fxp1 unit 0   family inetroot@M40# set interfaces fxp1 unit 0 family inet    ?Possible completions:            Execute this command> address            Interface address/destination prefix+ apply-groups         Groups from which to inherit configuration data+ apply-groups-exceptDon't inherit configuration data from these groups> filter               Packet filteringno-redirects         Do not redirect traffic> policer            Interface policingprimary            Candidate for primary interface in system|                  Pipe through a commandroot@M40# set interfaces fxp1 unit 0 family inet                   ?Possible completions:> ccc                  Circuit cross-connect parameters> inet               IPv4 parameters> inet6                IPv6 protocol parameters> iso                  OSI ISO protocol parameters> mpls               MPLS protocol parameters> tcc                  Translational cross-connect parameters> vpls               Virtual Private LAN Service (VPLS) parametersroot@M40# set interfaces fxp1 unit 0 family      iso ?Possible completions:            Execute this command> address            Interface address+ apply-groups         Groups from which to inherit configuration data+ apply-groups-exceptDon't inherit configuration data from these groups|                  Pipe through a commandroot@M40# set interfaces fxp1 unit 0 family iso    address ?Possible completions:               Interface addressroot@M40# set interfaces fxp1 unit 0 family iso address                                            inetroot@M40# set interfaces fxp1 unit 0 family inet               ?Possible completions:> inet               IPv4 parameters> inet6                IPv6 protocol parametersroot@M40# set interfaces fxp1 unit 0 family inet    ?Possible completions:            Execute this command> address            Interface address/destination prefix+ apply-groups         Groups from which to inherit configuration data+ apply-groups-exceptDon't inherit configuration data from these groups> filter               Packet filteringno-redirects         Do not redirect traffic> policer            Interface policingprimary            Candidate for primary interface in system|                  Pipe through a commandroot@M40# set interfaces fxp1 unit 0 family inet    file                                                 ^syntax error.root@M40# set interfaces fxp1 unit 0 family inet file               policer ?Possible completions:+ apply-groups         Groups from which to inherit configuration data+ apply-groups-exceptDon't inherit configuration data from these groupsinput                Name of policer applied to received packetsoutput               Name of policer applied to transmitted packetsroot@M40# set interfaces fxp1 unit 0 family inet policer       input ?Possible completions:                Name of policer applied to received packetsroot@M40# set interfaces fxp1 unit 0 family inet policer input    nat ?Possible completions:            Execute this command+ apply-groups         Groups from which to inherit configuration data+ apply-groups-exceptDon't inherit configuration data from these groupsoutput               Name of policer applied to transmitted packets|                  Pipe through a commandroot@M40# set interfaces fxp1 unit 0 family inet policer input nat                ...                                                                                                                                                                        root@M40# exit Exiting configuration moderoot@M40> request system reboot Reboot the system ? (no) yes shutdown: Shutdown NOW!root@M40>                                                                              *** FINAL System shutdown message from root@M40 ***                        System going down IMMEDIATELY                                                                                                                                                                                                                Jan 16 12:44:55 init: syslogd (PID 2062) exited with status=0 Normal ExitWaiting (max 60 seconds) for system process `bufdaemon' to stop...stoppedWaiting (max 60 seconds) for system process `syncer' to stop...stoppedsyncing disks... 3 3 1 doneUptime: 5m5sata0: Spinning down devices. Please wait...ata2: Spinning down devices. Please wait...Rebooting...Console: serial portBIOS drive C: is disk0BIOS 639kB/261104kB available memoryFreeBSD/i386 bootstrap loader, Revision 0.8(builder@iaculi.juniper.net, Fri Mar 19 13:30:21 GMT 2004)|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\Loading /boot/defaults/loader.conf |/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/kernel text=0x496b56 /-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|data=0x2b2f4+0x4b36c /-\|/-\|/-\|/-\|/-\|/-syms=                  Loader Quick Help                     ----------------- The boot order is PCMCIA or floppy -> Flash -> Disk -> Lan -> back to PCMCIA or floppy. Typing reboot from the command prompt will cycle through the boot devices. On some models, you can set the next boot device using the nextboot command: nextboot compact-flash | diskFor more information, use the help command: help   Hit to boot immediately, or space bar for command prompt.Booting in 9 seconds... Booting in 8 seconds... Booting in 7 seconds... Booting in 6 seconds... Booting in 5 seconds... Booting in 4 seconds... Booting in 3 seconds... Booting in 2 seconds... Booting in 1 second... Booting ...               |/-\|/-\Copyright ?1996-2001, Juniper Networks, Inc.All rights reserved.Copyright ?1992-2001 The FreeBSD Project.Copyright ?1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994        The Regents of the University of California. All rights reserved.JUNOS 6.2R2.4 #0: 2004-03-19 13:39:35 UTC    builder@iaculi.juniper.net:/build/iaculi-c/6.2R2.4/obj-i386/sys/compile/JUNIPERTimecounter "i8254"frequency 1193182 HzTimecounter "TSC"frequency 3153726912 HzCPU: Pentium 4 (3153.73-MHz 686-class CPU)Origin = "GenuineIntel"Id = 0xf27Stepping = 7Features=0xbfebfbffreal memory= 268419072 (262128K bytes)sio0: gdb debugging portavail memory = 254058496 (248104K bytes)Olive CPUPreloaded elf kernel "kernel" at 0xc0699000.DEVFS: ready for devicesmd0: Malloc disknpx0:on motherboardnpx0: INT 16 interfacepcib0:on motherboardpci0:on pcib0pci0:(vendor=0x8086, dev=0x2551) at 0.1pcib1:mem 0xf4000000-0xf7ffffff at device 1.0 on pci0pci1:on pcib1pci1:at 0.0 irq 11pci0:at 29.0 irq 11pci0:at 29.1 irq 12pci0:at 29.2 irq 10pci0:at 29.7 irq 9pcib2:at device 30.0 on pci0pci2:on pcib2pci2:(vendor=0x1102, dev=0x0002) at 1.0 irq 6pci2:(vendor=0x1102, dev=0x7002) at 1.1fxp0:port 0xb400-0xb41f mem 0xec800000-0xec8fffff,0xf1000000-0xf1000fff irq 9 at device 2.0 on pci2pci2:(vendor=0x14e4, dev=0x4401) at 5.0 irq 10fxp1:port 0xb000-0xb01f mem 0xeb800000-0xeb8fffff,0xf0000000-0xf0000fff irq 5 at device 6.0 on pci2fxp2:port 0xa800-0xa81f mem 0xeb000000-0xeb0fffff,0xef000000-0xef000fff irq 10 at device 7.0 on pci2isab0:at device 31.0 on pci0isa0:on isab0atapci0:port 0xf000-0xf00f,0-0x3,0-0x7,0-0x3,0-0x7 irq 10 at device 31.1 on pci0ata0: at 0x1f0 irq 14 on atapci0fdc0: direction bit not setfdc0: cmd 3 failed at out byte 1 of 3ata2 at port 0x170-0x177,0x376 irq 15 on isa0atkbdc0:at port 0x60,0x64 on isa0atkbd0:flags 0x1 irq 1 on atkbdc0vga0:at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0sc0:at flags 0x100 on isa0sc0: VGA sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0sio0: type 16550A, consolesio1: configured irq 5 not in bitmap of probed irqs 0sio2 at port 0x2f8-0x2ff irq 3 on isa0sio2: type 16550Asio3: configured irq 7 not in bitmap of probed irqs 0fxp0: Ethernet address 00:20:35:e7:c7:67fxp1: Ethernet address 00:20:35:e7:b2:b1fxp2: Ethernet address 00:20:35:e7:b2:b6DEVFS: ready to runad0: 1547MB at ata0-master using PIO3ata2-slave:CDROM device - NO DRIVER!Mounting root from ufs:/dev/ad0s1aMounted jbase package on /dev/vn0...Mounted jkernel package on /dev/vn1...Mounted jpfe package on /dev/vn2...Mounted jdocs package on /dev/vn3...Mounted jroute package on /dev/vn4...swapon: adding /dev/ad0s1b as swap deviceAutomatic reboot in progress.../dev/ad0s1a: FILESYSTEM CLEAN; SKIPPING CHECKS/dev/ad0s1a: clean, 77930 free /dev/ad0s1e: FILESYSTEM CLEAN; SKIPPING CHECKS/dev/ad0s1e: clean, 12110 free (26 frags, 9738 blocks, 0.0% fragmentation)(14 frags, 1512 blocks, 0.1% fragmentation)(26 frags, 9738 blocks, 0.0% fragmentation)/dev/ad0s1f: FILESYSTEM CLEAN; SKIPPING CHECKS/dev/ad0s1f: clean, 932884 free (308 frags, 116572 blocks, 0.0% fragmentation)tunefs: soft updates setCreating initial configuration...mgd: commit completeSetting initial options:debugger_on_panic=NO debugger_on_break=NO.Doing initial network setup:.Initial interface configuration:additional daemons: syslogd.checking for core dump...savecore: Router rebooting after a normal shutdown....Additional routing options:.Doing additional network setup:.Starting final network daemons:.setting ldconfig path: /usr/libstarting standard daemons: cron.Initial rc.i386 initialization: microcode kld.rc.i386 configuring syscons:.Local package initialization:.starting local daemons:.Wed Jan 16 12:46:40 UTC 2002M40 (ttyd0)login: M40 (ttyd0)login: M40 (ttyd0)login: M40 (ttyd0)login: 谢谢大家      希望大家提供自己junos的屏幕信息,配置以便于做研究学习

lxw2016 发表于 2004-11-24 11:15:59

6.2支持vmwar中的网卡吗

lxw2016 发表于 2004-11-28 12:16:10

我装了junos后系统起不来?怎么回事?

zwz2001 发表于 2004-11-28 21:19:56

确切的说olive的模式下是不能做nat,ids,状态防火墙的,按照juniper的文档说明这些特征都是在接口卡的流特征处理芯片里面完成,效率很高,juniper牛的地方就是这点了,分布式的流处理方式,所以在olive的模式是不可能有nat命令的。

samhui 发表于 2004-11-29 16:26:47

好呀。。支持支持支持支持支持支持支持支持支持支持支持支持支持支持!好像比较烦呀,不像cisco的ios
页: [1]
查看完整版本: JunoS重新大讨论