JNCIA-JUNOS Junos Configuration Basics — All Questions With Answers

Refer to the exhibit.

[edit]
user@router# show | compare
[edit interfaces ge-0/0/0 unit 0 family inet]
+ address 10.0.0.1/24;

[edit security]
+ policies {
+     from-zone trust to-zone untrust {
+         policy permit-all {
+             match {
+                 source-address any;
+                 destination-address any;
+                 application any;
+             }
+             then {
+                 permit;
+             }
+         }
+     }
+ }

Refer to the exhibit.

user@router> show configuration interfaces ge-0/0/1
unit 0 {
    family inet {
        filter {
            input BLOCK-SNMP;
        }
        address 192.168.1.1/24;
    }
}
user@router> show configuration firewall family inet filter BLOCK-SNMP
term 1 {
    from {
        source-address {
            10.0.0.0/8;
        }
        protocol udp;
        port 161;
    }
    then {
        reject;
    }
}
term 2 {
    then accept;
}

Refer to the exhibit.

user@router> show configuration interfaces ge-0/0/0
unit 0 {
    family inet {
        address 10.0.0.1/24;
    }
    family inet6 {
        address 2001:db8::1/64;
    }
}

Refer to the exhibit.

user@router> show configuration interfaces ge-0/0/0
unit 0 {
    family inet {
        address 10.1.1.1/30;
    }
    family inet6 {
        address 2001:db8::1/64;
    }
}

Refer to the exhibit.

[edit]
user@router# set interfaces ge-0/0/0 unit 0 family inet address 192.168.1.1/24
user@router# set interfaces ge-0/0/0 unit 0 family inet address 192.168.1.2/24
user@router# show interfaces ge-0/0/0
unit 0 {
    family inet {
        address 192.168.1.1/24;
        address 192.168.1.2/24;
    }
}

Refer to the exhibit.

[edit]
user@router# commit check
[edit interfaces xe-0/0/0 unit 0 family inet]
    'address 10.1.1.1/24'
    Error: Cannot configure an address on an interface that is not enabled with 'unit 0'
error: configuration check-out failed

Refer to the exhibit.

user@router> show configuration interfaces ge-0/0/1
unit 0 {
    family inet {
        address 10.0.0.1/24;
        address 10.0.0.2/24;
    }
}
unit 1 {
    family inet {
        address 10.0.1.1/24;
    }
}

user@router> show configuration interfaces ge-0/0/1 unit 0
family inet {
    address 10.0.0.1/24;
    address 10.0.0.2/24;
}

Refer to the exhibit.

```
edit
[edit]
user@router# show | display set | match ge-0/0/0
set interfaces ge-0/0/0 unit 0 family inet address 10.0.0.1/24
set interfaces ge-0/0/0 unit 0 family inet filter input BLOCK-ICMP
set interfaces ge-0/0/0 unit 0 family inet filter output ALLOW-ALL

[edit]
user@router# run ping 10.0.0.2 count 2
PING 10.0.0.2 (10.0.0.2): 56 data bytes
64 bytes from 10.0.0.2: icmp_seq=0 ttl=64 time=1.234 ms
64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=1.345 ms

--- 10.0.0.2 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
```

Refer to the exhibit.

```
user@router> show configuration | display set | match "policy-options"
set policy-options prefix-list BLOCK-RFC1918 10.0.0.0/8
set policy-options prefix-list BLOCK-RFC1918 172.16.0.0/12
set policy-options prefix-list BLOCK-RFC1918 192.168.0.0/16
set policy-options policy-statement DENY-RFC1918 term 1 from prefix-list BLOCK-RFC1918
set policy-options policy-statement DENY-RFC1918 term 1 then reject
set policy-options policy-statement DENY-RFC1918 term 2 then accept
```

Refer to the exhibit.

```
user@router> show configuration interfaces ge-0/0/0
unit 0 {
    family inet {
        address 192.168.1.1/24;
    }
}

user@router> show configuration interfaces ge-0/0/1
unit 0 {
    family inet {
        address 10.0.0.1/24;
    }
}

user@router> show configuration routing-options static
route 0.0.0.0/0 next-hop 192.168.1.254;

user@router> show route protocol static

inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

0.0.0.0/0          *[Static/5] 00:10:00 > to 192.168.1.254 via ge-0/0/0.0
```

[edit interfaces ge-0/0/0]
user@router# show
unit 0 {
    family inet {
        address 192.168.1.1/24;
    }
    family inet6 {
        address 2001:db8::1/64;
    }
}
user@router#

user@router> show configuration | compare
[edit interfaces ge-0/0/1 unit 0 family inet]
+      address 10.0.0.1/24;
-      address 10.0.0.2/24;

user@router# commit check
error: configuration check-out failed:
  syntax error
  '1.1.1.1/32'
  error: policy-options policy-statement test term 0 from protocol is not valid