远程基本配置
root@SRX1# show | display set
set version 12.1X44.4
set system host-name SRX1
set system time-zone Asia/Shanghai
set system root-authentication encrypted-password "$1$0m2EDDUB$hW0MnI7hQFLfmFmROx02B1"
set system name-server 114.114.114.114
set system services ssh
set system services web-management http
set system ntp server 62.201.225.9
set interfaces ge-0/0/0 unit 0 family inet address 192.168.130.212/24
set interfaces ge-0/0/1 unit 0 family inet address 1.1.1.254/24
set routing-options static route 0.0.0.0/0 next-hop 192.168.130.2
set security nat source rule-set NAT-Policy from zone trust
set security nat source rule-set NAT-Policy to zone untrust
set security nat source rule-set NAT-Policy rule Trust-Untrust-Interface-NAT match source-address 1.1.1.0/24
set security nat source rule-set NAT-Policy rule Trust-Untrust-Interface-NAT then source-nat interface
set security policies from-zone trust to-zone untrust policy Permit-ALL match source-address any
set security policies from-zone trust to-zone untrust policy Permit-ALL match destination-address any
set security policies from-zone trust to-zone untrust policy Permit-ALL match application any
set security policies from-zone trust to-zone untrust policy Permit-ALL then permit
set security zones security-zone untrust host-inbound-traffic system-services ping
set security zones security-zone untrust host-inbound-traffic system-services ssh
set security zones security-zone untrust host-inbound-traffic system-services http
set security zones security-zone untrust interfaces ge-0/0/0.0
set security zones security-zone trust host-inbound-traffic system-services ping
set security zones security-zone trust host-inbound-traffic system-services ssh
set security zones security-zone trust host-inbound-traffic system-services http
set security zones security-zone trust interfaces ge-0/0/1.0
set security nat static rule-set static-nat from zone untrust
set security nat static rule-set static-nat rule rule1 match destination-address 192.168.130.199/32
set security nat static rule-set static-nat rule rule1 then static-nat prefix 1.1.1.1/32
set security nat proxy-arp interface ge-0/0/0.0 address 192.168.130.199/32
set security zones security-zone trust address-book address test 1.1.1.1/32
set security zones security-zone trust address-book address-set 1.1.1.1 address test
set applications application 3389 protocol tcp
set applications application 3389 destination-port 3389
set applications application-set 3389-3389 application 3389
set security policies from-zone untrust to-zone trust policy 1 match source-address any
set security policies from-zone untrust to-zone trust policy 1 match destination-address test
set security policies from-zone untrust to-zone trust policy 1 match application 3389-3389
set security policies from-zone untrust to-zone trust policy 1 then permit
===========================================================================================
root@SRX2> 显示界面简洁|匹配g查看接口配置
root@SRX2 #显示|显示设置,查组看格式的配置
root@SRX2 #显示|比较查看待提交配置与当前运行配置的差别
root@SRX2>明确系统提交清除未被提交的配置
root@SRX2>显示系统正常运行时间查看系统时钟
root@SRX2 #承诺在“2016-09-30 13:48:00”,在指定时间保存配置
root@SRX2 #提交评论“只有测试”为提交的配置进行说明
root@SRX2>显示系统提交查看提交配置的说明(包含有提交的配置说明)
root@SRX2 #回滚?,查看可恢复的配置
root@SRX2 9 #回滚,恢复某一配置,需提交配置才生效
root@SRX2 #提交确认确认提交配置命令(十分钟内不对配置进行确认,自动恢复配置到提交之前)
root@SRX2 #提交并退出确认并且退出
root@SRX2 #设置系统主机My-SRX设置主机名
root@SRX2 #设置系统名称服务器114.114.114.114设置DNS
root@SRX2>显示系统正常运行时间查看时间
root@SRX2 #设置系统时区亚洲/上海设置时区
root@SRX2>设置日期200808080808.08手动设置时间
root@SRX2 #设置系统国家结核控制规划服务器3. asia.pool.ntp.org设置国家结核控制规划
root@SRX2>显示国家结核控制规划协会查看国家结核控制规划
root@SRX2>显示国家结核控制规划状态查看国家结核控制规划
root@SRX2>要求系统重新引导重启系统
