show interfaces descriptions
show interface terse
show interface fe-2/0/1 brief
show interface fe-2/0/1
show interface fe-2/0/1 detail
show interface fe-2/0/1 extensive
firewall family inet
filter sample-filter {
term block-bad-subnet {
from {
source-address {
192.168.0.0/24 except;
0.0.0.0/0;
}
}
then accept;
}
}
可以使用 annotate 方式加以註解
tcp Port deny
IOS
access-list 100 deny tcp deny 192.168.0.1 0.0.255.0 range 22 23
access-list 100 premit ip any any
JunOS
filter protect-routers {
term block-cli-access {
from {
destination-address {
192.168.0.1/255.255.0.255;
}
protocol tcp;
destination-port [ ssh telnet ];
}
then {
reject;
}
}
term allow-others {
then accept;
}
}