SRX高端防火墙简明配置手册-20120823.doc

第 PAGE 23 页 共 NUMPAGES 25 页 Juniper SRX防火墙简明配置手册 目录 TOC \o 1-3 \h \z \u HYPERLINK \l _Toc332891916 一、JUNOS操作系统介绍 PAGEREF _Toc332891916 \h 3 HYPERLINK \l _Toc332891917 1.1 层次化配置结构 PAGEREF _Toc332891917 \h 3 HYPERLINK \l _Toc332891918 1.2 JunOS配置管理 PAGEREF _Toc332891918 \h 4 HYPERLINK \l _Toc332891919 1.3 SRX主要配置内容 PAGEREF _Toc332891919 \h 4 HYPERLINK \l _Toc332891920 二、SRX防火墙配置说明 PAGEREF _Toc332891920 \h 5 HYPERLINK \l _Toc332891921 2.1 初始安装 PAGEREF _Toc332891921 \h 5 HYPERLINK \l _Toc332891922 2.1.1 登陆 PAGEREF _Toc332891922 \h 5 HYPERLINK \l _Toc332891923 2.1.2 设置root用户口令 PAGEREF _Toc332891923 \h 5 HYPERLINK \l _Toc332891924 2.1.3JSRP初始化配置 PAGEREF _Toc332891924 \h 6 HYPERLINK \l _Toc332891925 2.1.4 设置远程登陆管理用户 PAGEREF _Toc332891925 \h 8 HYPERLINK \l _Toc332891926 2.1.5 远程管理SRX相关配置 PAGEREF _Toc332891926 \h 9 HYPERLINK \l _Toc332891927 2.1.6SRX的zone及相关接口的配置 PAGEREF _Toc332891927 \h 10 HYPERLINK \l _Toc332891928 2.2 Policy PAGEREF _Toc332891928 \h 11 HYPERLINK \l _Toc332891929 2.3 NAT PAGEREF _Toc332891929 \h 12 HYPERLINK \l _Toc332891930 2.3.1 Interface based NAT PAGEREF _Toc332891930 \h 12 HYPERLINK \l _Toc332891931 2.3.2 Pool based Source NAT PAGEREF _Toc332891931 \h 13 HYPERLINK \l _Toc332891932 2.3.3 Pool base destination NAT PAGEREF _Toc332891932 \h 14 HYPERLINK \l _Toc332891933 2.3.4 Pool base Static NAT PAGEREF _Toc332891933 \h 15 HYPERLINK \l _Toc332891934 2.4 IPSEC VPN PAGEREF _Toc332891934 \h 15 HYPERLINK \l _Toc332891935 2.5 Application and ALG PAGEREF _Toc332891935 \h 17 HYPERLINK \l _Toc332891936 三、SRX防火墙常规操作与维护 PAGEREF _Toc332891936 \h 17 HYPERLINK \l _Toc332891937 3.1 单机设备关机 PAGEREF _Toc332891937 \h 17 HYPERLINK \l _Toc332891938 3.2 单机设备重启 PAGEREF _Toc332891938 \h 17 HYPERLINK \l _Toc332891939 3.3 单机操作系统升级 PAGEREF _Toc332891939 \h 18 HYPERLINK \l _Toc332891940 3.4 双机模式下主备SRX关机 PAGEREF _Toc332891940 \h 18 HYPERLINK \l _Toc332891941 3.5 双机模式下主备设备重启 PAGEREF _Toc332891941 \h 18 HYPERLINK \l _Toc33289194