增加端口配置模板
(1)需要子接口的端口配置
set interfaces fe-2/0/1 vlan-tagging ――――在配置接口啟用封裝VLAN
set interfaces fe-2/0/1 unit 424 vlan-id 424 ―――――配置子接口,VLAN 424
set interfaces fe-2/0/1 unit 424 family inet address 192.168.254.146/30 ――配置子接口地址
(2)無需子接口配置
set interfaces fe-2/0/23 unit 0 family inet address 222.60.11.154/29 ――直接配置地址
(3)E1口配置
set interfaces e1-3/0/0 encapsulation ppp 封裝鏈路類型,包含PPP,HDLC,根據(jù)實(shí)際情況配置
set interfaces e1-3/0/0 e1-options framing unframed 封裝幀格式,參數(shù)包含unframed,g704, g704-no-crc4
set interfaces e1-3/0/0 unit 0 family inet address 192.168.1.126/30 配置地址
(4)CE1配置
set interfaces ce1-4/0/0 clocking external
set interfaces ce1-4/0/0 e1-options framing g704-no-crc4
set interfaces ce1-4/0/0 partition 1 timeslots 1-31 ――――設(shè)置信道1及時(shí)隙1-31
set interfaces ce1-4/0/0 partition 1 interface-type ds ――――子接口類型DS
set interfaces ds-4/0/0:1 encapsulation ppp ―――――配置子接口封裝ppp
set interfaces ds-4/0/0:1 unit 0 family inet filter input NYYH
set interfaces ds-4/0/0:1 unit 0 family inet address 10.238.173.197/30 ――――配置地址
(5)策略配置
set firewall filter shigonganjuMAS term 1 from source-address 10.238.173.180/30
set firewall filter shigonganjuMAS term 1 then accept
set firewall filter shigonganjuMAS term 2 from source-address 10.238.173.0/24
set firewall filter shigonganjuMAS term 2 from source-address 10.238.179.0/24
set firewall filter shigonganjuMAS term 2 then discard
set firewall filter shigonganjuMAS term 3 then accept
set interfaces fe-2/0/0 unit 44 family inet filter input jiaotongyinhangduanxin―――將策略應(yīng)用至子接口。