Creating a New Configuration

To create a new base configuration, perform the following tasks:

• Log in to the Router Console
• Add the Management Console
• Create Management User Accounts
• Commit Changes

Log in to the Router Console

First, you need to log in to the router's console interface and open the CLI in configuration mode:

1. Verify the router is powered on.
2. Log in through the console port as root. Initially, the root account is not associated with a password.

   Amnesiac <ttyd0>
      
   
   login: root
   

3. Start the CLI, which initially opens in operational mode. Note the command prompt ends with > in the CLI operational mode.

   root@% cli
   
   root>

4. Enter the CLI configuration mode. Note the command prompt ends with # in the CLI configuration mode.

   root> configure
   
   [edit]
   root#

Add the Management Console

Next, configure the management interface to the network:

1. Specify the router name. If the name includes spaces, enclose the name in quotation marks (“ ”).

   [edit]
   root# set system host-name host-name
   
      
   
   [edit]
   root# set system host-name “host name”
   

2. Configure the IP address of the DNS server.

   [edit]
   root# set system name-server address
   

3. Configure the router domain name.

   [edit]
   root# set system domain-name domain-name
   

4. Configure the IP address and prefix length for the router Ethernet interface.

   [edit]
   root# set interfaces fxp0 unit 0 family inet address address/prefix-length
   

5. Configure the IP address of a backup router. The backup router is used while the local router is booting and if the routing process fails to start. Once the routing process starts, the backup router address is removed from the local routing and forwarding tables. For more information on the backup router, see the JUNOS System Basics Configuration Guide.

   [edit]
   root# set system backup-router address
   

6. (Optional) Configure the static routes to remote subnets with access to the management port. Access the management port is limited to the local subnet. To access the management port from a remote subnet, you need to add a static route to that subnet within the routing table. For more information on static routes, see the JUNOS System Basics Configuration Guide.

   [edit]
   root# root# set routing-options static route remote-subnet next-hop destination retain no-readvertise
   

7. Configure the telnet service at the [edit system services] hierarchy level.

   [edit]
   
   set system services telnet
   

Create Management User Accounts

Once you have added the management port to the network, you need to set up one or more administrator accounts. These accounts will be used to log in to the management interface.

1. Add a password to the root (superuser) administration user account.

   [edit]
   root# set system root-authentication plain-text-password
   
   New password: password
   
   Retype new password: password
   

2. Create a management console user account.

   [edit]
   root# set system login user user-name authentication plain-text-password
   
   New Password: password
   
   Retype new password: password
   

3. Set the user account class to super-user.

   [edit]
   root# set system login user user-name class super-user
   

Commit Changes

Now that you have updated the router configuration file, you need to commit the configuration and reboot the router.

1. Before you commit your configuration, review your entries using the show command.

   root# show
   
   ## Last changed: 2008-08-27 22:30:42 UTC
   version 9.3B1.5;
   system {
       host-name tp8;
       domain-name subnet.juniper.net;
       backup-router 192.168.71.254;
       root-authentication {
           encrypted-password "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx."; ## SECRET-DATA
       }
       name-server {
           192.168.5.68;
           172.17.28.101;
       }
       login {
           user regress {
               class super-user;
               authentication {
                   encrypted-password "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"; ## SECRET-DATA
               }
           }
       }
       services {
           telnet;
       }
       syslog {
           user * {
               any emergency;
           }
           file messages {
               any notice;
               authorization info;
           }
           file interactive-commands {
               interactive-commands any;
           }
       }
   }
   interfaces {
       fxp0 {
           unit 0 {
               family inet {
                   address 192.128.69.205/21;
               }
           }
       }
   }
   routing-options {
       static {
           route 172.16.0.0/12 {
               next-hop 192.168.71.254;
               retain;
               no-readvertise;
           }
           route 192.168.0.0/16 {
               next-hop 192.168.71.254;
               retain;
               no-readvertise;
           }
       }
   }

2. Commit the configuration.

   [edit]
   root# commit
   
   commit complete

   Note: If you receive an error message after your commit, you can review your configuration using the show command. If you find an error, you can delete incorrect entries using the delete command.

3. Exit configuration mode.

   [edit]
   root# exit
   
   Exiting configuration mode
      
   
   root>

4. Reboot the router.

   root> request system reboot
   
   Reboot the system ? [yes, no] <no> yes
   

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.