5-2-4p0-8
10 online DPFE enabled — erx_5-2-4p0-8.rel 0d00h:29m:13s

7-3-2p0-1
10 disabled (admin) DPFE disabled — —

if you want the limit cli idle-timeout on the group , must config the command on class user
@ANC_MX# set system login class super-user idle-timeout 5
warning: ‘super-user’ is a predefined class name; changing to ‘super-user-local’
(if locally, you will get the message : warning: ‘super-user’ is a predefined class name; changing to ‘super-user-local’ )

set idle-timeout on super-user
@ANC_MX# set system login class super-user-local idle-timeout 5
[edit]
@ANC_MX# commit
commit complete

message : fstab read-only

command is : mount -u -o rw / #change the root / to writable

C:\Documents and Settings\bing>diskpart

Microsoft DiskPart version 5.1.3565

Copyright (C) 1999-2003 Microsoft Corporation.
在電腦: BINGPC

DISKPART> list disk

磁碟 ### 狀態 大小 可用的 Dyn Gpt
——– ———- ——- ——- — —
磁碟 0 線上 466 GB 0 B
磁碟 1 線上 298 GB 0 B
磁碟 2 線上 149 GB 0 B
磁碟 3 線上 186 GB 0 B

DISKPART> select disk 1

磁碟 1 是所選擇的磁碟。

DISKPART> clean

DiskPart 成功地清理了磁碟。

set interface ge-0/0/0 disable #shutdown interface
delete interface ge-0/0/0 disable #no shutdown interface

run shot inter ge-0/0/3 extensive | find Auton

#edit interface ge-0/0/4 ether-options
#set speed 100m
#set link-mode full-duplex
#commit
#set inter ge-0/0/4 ether-options no-auto-negotiation #no autonegotiation

LACP
JunOS
#set chassis aggregated-device ethernet device-count 1
#set interface ge-0/0/5 ether-options 802.3ad ae0
#set interface ge-0/0/6 ether-options 802.3ad ae0
#set interface ae0 unit 0 family ethernet-switching port-mode trunk
#set interface ae0 aggregated-ether-options lacp active

IOS
interface Port-chiannel1
switchport trunk encapsulation dot1q
switchport mode trunk
!
inter Giga0/5
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode active
!
inter Giga0/6
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode active

VLAN
#edit vlans
#set example \\ 設定一個example 名稱的vlan
#set example vlan-id 100 \\ 給它tag 100
#run show vlans \\ 看所有VLAN
加入 interface
[edit vlans]
#set example interface ge-0/0/7.0 \\將 ge-0/0/07.0 加入 vlan example

[edit vlans]
#top edit interface

[edit interfaces]
#set ge-0/0/7 unit 0 family ethernet -switching

[edit interfaces]
#set ge-0/0/8 unit 0 family ethernet-switching vlan members 100

[edit interfaces]
#set ge-0/0/9 unit 0 family ethernet-switching vlan members example

#run show vlans example detail
VLAN: example, 802.1Q tag:100 admin state: Enable
Numbr of interfaces: 3 (Active = 3)
Untagged interface: ge-0/0/7.0*, ge-0/0/08.0*, ge-0/0/09.0*

可以用數個方法去指定port到vlan裡, 或數個vlan tag 進 trunk port
1.config the interface under the [edit vlans] hierarchy
2.config vlan membership under the [edit inter interface-name unit 0 family ethernet-switching] hierarchy either by:
a. Using the VLAN ID
b. Using the VLAN name

#run show vlans phones detail \\看 phones 這個vlan的detail ( in/out ,ip,member)
#show phones \\ phones çš„config

進度 5的 configuring Access Ports

firewall family inet
filter sample-filter {
term block-bad-subnet {
from {
source-address {
192.168.0.0/24 except;
0.0.0.0/0;
}
}
then accept;
}
}

可以使用 annotate 方式加以註解

tcp Port deny
IOS
access-list 100 deny tcp deny 192.168.0.1 0.0.255.0 range 22 23
access-list 100 premit ip any any

JunOS
filter protect-routers {
term block-cli-access {
from {
destination-address {
192.168.0.1/255.255.0.255;
}
protocol tcp;
destination-port [ ssh telnet ];
}
then {
reject;
}
}
term allow-others {
then accept;
}
}