Friday, February 27, 2009

Useful Juniper Commands

How to display the entire config

get config

To view logs for a particular policy id:

get log traffic policy

How to display product name, serial number, HW version, date, IP, uptime

get system

Display almost every system internal limit imaginable

get sys-cf

Display Memory and CPU

get memory

get performance cpu



Display event messages

get event

How to display system limits (max sessions, addresses, router, VPNs, etc)

get system scale

How to show interface stats

get interface

states:

A active I inactive U up D down R ready

To see if Ping is enabled to an interface do :

get interface eth3



To change a service timeout
set service http timeout "in minutes"

To confirm and add routes:

get interface will show the zone for the interface

get zone will show the VR for the Zone.

get route will show the routes for that zone. * indicates an active route.



Or do get route ip 1.1.1.1



To add a route:

set route 0.0.0.0/0 gateway 1.1.1.2

Creating time based policies:
First you create a schedule.

set scheduler recurrent start stop

Now associate it to the policy.

set policy from trust to untrust any any http permit schedule

0 comments:

Post a Comment