Secure-to-Router Context Task Overview

To change from secure context to router context, you perform the following tasks:

• Make a backup of your current configuration file.
• Use the load override command to load the configuration file for router context (jsr-series-routermode-factory.conf).
• Assign a root password for the router. For security purposes, the jsr-series-routermode-factory.conf file does not include a default root password. You need to assign a root password so that you are able to commit configuration changes.
• Optionally, to retain remote IP-based connectivity to the Services Router after changing to router context, perform the following tasks:
  • If you have a static IP address assigned to the ge-0/0/0 interface and do not want to run autoinstallation, you must remove the [system autoinstallation] hierarchy from the configuration. Doing so ensures that the router is not automatically assigned an IP address of 192.168.2.1 if it cannot acquire an IP address using DHCP. You must also configure the static IP address that was previously assigned to the ge-0/0/0 interface.

    For more information about autoinstallation, see Configuring Autoinstallation.

  • If you do not have remote access to the console, create a local user account to allow remote access for a non-root user account.
  • If you previously configured routing information, use your backup configuration file as a reference to configure the routing information for your network.
• Commit the configuration changes, and make the candidate configuration the running configuration.

Caution: If you do not assign an IP address for the ge-0/0/0 interface, create a local user account, and enter routing information, either from CLI configuration or using DHCP, before you commit the changes, the router is no longer remotely accessible. To manage the router, you must connect a PC or laptop to the physical console, or attach the PC or laptop to a subnet that is directly connected to the ge-0/0/0 interface, which is assigned an IP address of 192.168.2.1. Any configuration changes that you made before you issued the load override command are no longer part of the current running configuration.

If necessary, to return the Services Router to the factory default (secure context) configuration, you can press the RESET CONFIG button. Keep in mind that pressing the RESET CONFIG button for 15 seconds or more deletes all configuration files on the Services Router, including backup configuration and rescue configuration files. The factory configuration is loaded and committed. For more information about the RESET CONFIG button, see the JUNOS Software Administration Guide.

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.