Ping通Juniper SRX防火牆接口條件

Juniper SRX防火牆接口包括兩種:

1、管理接口,默認爲fxp0

2、業務接口,這裏通常是指配置用來跑業務的板卡接口,如:SRX3k SFB 12GE(8x 1GE-TX 4x 1GE-SFP)

 

對於管理接口,配置IP後即可ping通

netscreen@SRX3600# set interfaces fxp0 unit 0 family inet address 10.200.27.156/16

C:\>ping 10.200.27.156

Pinging 10.200.27.156 with 32 bytes of data:

Reply from 10.200.27.156: bytes=32 time<1ms TTL=64
Reply from 10.200.27.156: bytes=32 time<1ms TTL=64
Reply from 10.200.27.156: bytes=32 time<1ms TTL=64
Reply from 10.200.27.156: bytes=32 time<1ms TTL=64

Ping statistics for 10.200.27.156:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

如果需要telnet/ssh管理接口IP地址,則還需要放開系統層面級的telnet/ssh服務:

netscreen@SRX3600# set system services ssh
netscreen@SRX3600# set system services telnet

 

對於業務接口,僅僅配置IP地址無法ping:

netscreen@SRX3600# set interfaces ge-0/0/0 unit 0 family inet address 10.200.51.203/16

C:\>ping 10.200.51.203

Pinging 10.200.51.203 with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 10.200.51.203:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

還需要該接口分配到相應的Zones,同時開放相應的服務(ping/telnet/ssh):

netscreen@SRX3600# set security zones security-zone untrust interfaces ge-0/0/0.0
netscreen@SRX3600# set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ping
netscreen@SRX3600# set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services telnet
netscreen@SRX3600# set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ssh

 

C:\>ping 10.200.51.203

Pinging 10.200.51.203 with 32 bytes of data:

Reply from 10.200.51.203: bytes=32 time<1ms TTL=64
Reply from 10.200.51.203: bytes=32 time<1ms TTL=64
Reply from 10.200.51.203: bytes=32 time<1ms TTL=64
Reply from 10.200.51.203: bytes=32 time<1ms TTL=64

Ping statistics for 10.200.51.203:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

 

C:\>telnet 10.200.51.203

SRX3600B (ttyp1)

login:

發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章