Juniper(주니퍼) NetScreen(NS-5GT)을 사용해 F/W구성실습
2008/04/15 10:341
Juniper(주니퍼) NetScreen(NS-5GT) Soft Reset (초기화)
출처:
http://blog.naver.com/ilmare0569/8005075517
문제 발생시 댓글이나 메일로 보내주세요. 삭제하겠습니다.
1) Console 접속: 하이퍼터미널 연결
login: netscreen
password: *********
ns5gt-> unset all
Erase all system config, are you sure y/[n] ? y
ns5gt-> reset
Configuration modified, save? [y]/n n
Save System Configuration ...
Done
System reset, are you sure? y/[n] y
In reset ...
NetScreen NS-5GT Boot Loader Version 2.1.0 (Checksum: 61D07DA5)
Copyright (c) 1997-2003 NetScreen Technologies, Inc.
Total physical memory: 128MB
Test - Pass
Initialization.... Done
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Loading default system image from on-board flash disk
Done! (size = 5,439,488 bytes)
Ignore image authentication!
Start loading...
.................................................................
.................................................................
.....................
Done.
Juniper Networks, Inc
NS-5GT System Software
Copyright, 1997-2004
Version 5.0.0r11.1
Load Manufacture Information ... init manufacture info Done
Load NVRAM Information ... (5.0)Done
Install module init vectors
allocating 33558528 bytes for memory disk
Formatting RAM disk...
Initialize FBTL.... Done
Initial port mode trust-untrust(1)
Install modules (007e85d8,00cd15b0) ... load dns table . Done
Initializing DI 1.1.0-ns
b371fc011100101f
System config (843 bytes) loaded
.
Done.
Load System Configuration ......................................................
...........Done
system init done..
login: trust interface change state to Up
System change state to Active(1)
login: ß 이 메시지가 나오면 성공 !!!
2) Telnet 접속
C:\> telnet 192.168.1.1
Remote Management Console
login: netscreen
password: *********
ns5gt->
ns5gt-> unset all
Erase all system config, are you sure y/[n] ? y
ns5gt-> reset
Configuration modified, save? [y]/n n
System reset, are you sure? y/[n] y
In reset ...
호스트에 대한 연결을 잃었습니다.
C:>
C:\> telnet 192.168.1.1 ß 다시 접속해 본다.
Remote Management Console
login: ß 이 메시지가 나오면 성공 !!!
Juniper NetScreen(NS-5GT) Hard Reset (초기화)
Configuration Erasure Process has been initiated. ßreset스위치를 누르면 나옴
Waiting for 2nd confirm 5-6초 정도 누르고 있으면 나옴
2nd push has been confirmed. 스위치를 땠다가 다시 누르면 나옴
Configuration Erase sequence accepted, unit reset. 5-6초 정도 누르고 있으면 나옴
아래 메시지 나오면 성공 !!!!
NetScreen NS-5GT Boot Loader Version 2.1.0 (Checksum: 61D07DA5)
Copyright (c) 1997-2003 NetScreen Technologies, Inc.
Total physical memory: 128MB
Test - Pass
Initialization.... Done
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Loading default system image from on-board flash disk...
Done! (size = 5,439,488 bytes)
Ignore image authentication!
Start loading...
.................................................................
.................................................................
.................................................................
.....................
Done.
Juniper Networks, Inc
NS-5GT System Software
Copyright, 1997-2004
Version 5.0.0r11.1
Load Manufacture Information ... init manufacture info Done
Load NVRAM Information ... (5.0)Done
Install module init vectors
allocating 33558528 bytes for memory disk
Formatting RAM disk...
Initialize FBTL.... Done
Initial port mode trust-untrust(1)
Install modules (007e85d8,00cd15b0) ... load dns table . Done
Initializing DI 1.1.0-ns
b371fc011100101f
*********************************************************
System time: 23 Nov 2007 23:10:58
If this is the initial device startup,
use the "set clock" command to set the system clock.
*********************************************************
system init done..
login: trust interface change state to Up
System change state to Active(1)
login: ß 이 메시지가 나오면 성공 !!!
Juniper Networks NetScreen(NS5GT) 설정방법 정리
console 관리 접속 및 명령어: 하이퍼터미널
login/pass : netscreen/netscreen
set interface untrust ip 10.10.6.200/16
set interface trust ip 192.168.1.1/24
set interface trust dhcp server enable
set interface trust dhcp server ip 192.168.1.2
set interface trust dhcp server ip 192.168.1.3
set interface trust dhcp server option netmask 255.255.255.0
set interface trust dhcp server option gateway 10.10.0.1
set interface trust dhcp server option dns1 168.126.63.1
get interface trust dhcp server ip ß dhcp 클라이언트 현황 확인
get route ß Routing Table 확인
unset route 0.0.0.0/0
set route 0.0.0.0/0 interface untrust gateway 10.10.0.1
get route
-------------->set arp 192.168.1.1 00089f2c801c untrust 잘못된 arp를 알아와서
192.168.1.1의 MAC을 세팅해준다
tab키 : 자동완성
? : 도움말
웹 관리 접속 및 명령어
https://192.168.1.1
ID/PASS : netscreen/netscreen