Juniper SRX防火牆接口包括兩種:
1、管理接口,默認爲fxp0
2、業務接口,這裏通常是指配置用來跑業務的板卡接口,如:SRX3k SFB 12GE(8x 1GE-TX 4x 1GE-SFP)
對於管理接口,配置IP後即可ping通:
netscreen@SRX3600# set interfaces fxp0 unit 0 family inet address 10.200.27.156/16
C:\>ping 10.200.27.156
Pinging 10.200.27.156 with 32 bytes of data:
Reply from 10.200.27.156: bytes=32 time<1ms TTL=64
Reply from 10.200.27.156: bytes=32 time<1ms TTL=64
Reply from 10.200.27.156: bytes=32 time<1ms TTL=64
Reply from 10.200.27.156: bytes=32 time<1ms TTL=64
Ping statistics for 10.200.27.156:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
如果需要telnet/ssh管理接口IP地址,則還需要放開系統層面級的telnet/ssh服務:
netscreen@SRX3600# set system services ssh
netscreen@SRX3600# set system services telnet
對於業務接口,僅僅配置IP地址無法ping:
netscreen@SRX3600# set interfaces ge-0/0/0 unit 0 family inet address 10.200.51.203/16
C:\>ping 10.200.51.203
Pinging 10.200.51.203 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 10.200.51.203:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
還需要該接口分配到相應的Zones,同時開放相應的服務(ping/telnet/ssh):
netscreen@SRX3600# set security zones security-zone untrust interfaces ge-0/0/0.0
netscreen@SRX3600# set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ping
netscreen@SRX3600# set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services telnet
netscreen@SRX3600# set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ssh
C:\>ping 10.200.51.203
Pinging 10.200.51.203 with 32 bytes of data:
Reply from 10.200.51.203: bytes=32 time<1ms TTL=64
Reply from 10.200.51.203: bytes=32 time<1ms TTL=64
Reply from 10.200.51.203: bytes=32 time<1ms TTL=64
Reply from 10.200.51.203: bytes=32 time<1ms TTL=64
Ping statistics for 10.200.51.203:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
C:\>telnet 10.200.51.203
SRX3600B (ttyp1)
login: