Juniper防火墙初级动手配置.ppt

防火墙初级动手配置 议程 系统管理 透明模式 路由模式 安全策略 地址翻译 应用层和网络层防攻击 系统管理 系统组成 所有关键的系统功能都在内存中运行 。 可以通过控制线和webu对防火墙的配置进行修改。 显示状态信息 - CLI In the CLI, get commands provide valuable status about operational conditions: System serial number Software version Operating mode Interface status Interface address Management addresses 图形化界面 - WebUI NetScreen 防火墙可以通过图形化的界面进行管理。 需要的条件 (ie. one IP address) 一台PC机与防火墙在同一个网段 口令保护 管理IP对应的接口必须开启了WEB管理功能 Juniper NetScreen Management WebUI 文件管理 备份/恢复 netscreen 防火墙所需要的重要的配置文件信息。 ScreenOS image Configuration files 备份/恢复 配置文件的存放 On-board Flash TFTP server External storage (SANdisk) Management station (WebUI only) 保存配置 WebUI Saves automatically when you click “Apply” or “OK” Console displays save messages CLI Manual command Writes to on-board flash configuration file 配置文件管理 - CLI 只有根管理员才能进行这些操作 配置文件备份 配置文件恢复 Option 1: copies file into flash – available at next reboot Option 2: merges file into RAM – BE CAREFUL!!! 配置文件管理 – WebUI 配置的回退（ Rollback） Provides “safety net” for failed/corrupted config If default config in flash can’t be loaded, system will try to load “last known good” file Can be forced manually to correct config mistakes Create rollback file Force rollback 软件包的管理 Image backup Image importing (Upgrade) Upgrade Example – CLI Upgrade Example - WebUI 灾难恢复——“Disaster” Recovery NetScreen devices support features to deal with electronic “disasters” Corrupted ScreenOS image in Flash Lost root password Requirement to reset to ‘factory defaults’ 根管理员口令丢失 口令不能被恢复 系统需要回到出厂设置 Also called “Asset Recovery” All configuration parameters, certificates, and keys are deleted 两种方法 Log in to console with device serial number as username and password Warning messages regarding destructive results will appear Use pinhole on exterior of system Press until flashing light changes to red Wait until flashing red turns to flashing green Press again 恢复出厂设置 Reset to factory defaults If no configuration exists in FLASH The Startup Wizard will launch. Enables you to