Juniper防火牆丟失ScreenOS的災難恢復

 

Juniper的防火牆是一臺硬件防火牆，有硬件系統也有軟件系統也就是ScreenOS，硬件會出故障軟件天然也會出故障，在實際使用中我就碰到過屢次Juniper防火牆ScreenOS丟失的狀況，大多數狀況是由於忽然斷電形成的。

下面就介紹一下如何在丟失ScreenOS的狀況下從新安裝ScreenOS。

將PC機與防火牆用console線和網線相鏈接。

斷電重啓防火牆，在命令行提示有Hit any key to run loader時，按任意鍵進入Loader。

根據提示，輸入Boot File Name、Self IP Address和TFTP IP Address。同時打開TFTP軟件，設置好下載目錄。

重啓後在超級終端會出現以下提示：

NetScreen NS-5GT Boot Loader Version 2.1.0 (Checksum: 61D07DA5)

Copyright (c) 1997-2003 NetScreen Technologies, Inc.

Total physical memory: 128MB

Test - Pass

Initialization.... Done

Hit any key to run loader

Hit any key to run loader

Hit any key to run loader

敲擊任意鍵進入設置界面

Serial Number [0064042006003887]: READ ONLY

HW Version Number [1010]: READ ONLY 3

Self MAC Address [0014-f695-75e0]: READ ONLY

Boot File Name [ns5gt.5.0.0r8.1]: ns5gt.5.4.0r1.0 //輸入你你ScreenOS文件名

Self IP Address [192.168.1.1]: 192.168.3.1 //設置防火牆trust口的ip地址

TFTP IP Address [192.168.1.254]: 192.168.3.180 //輸入你pc機的ip地址，也就是你tftp的地址

Save loader config (56 bytes)... Done

Loading file "ns5gt.5.4.0r1.0"...

rtatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatata

tatatatatatatatatataatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatata

tatatatatatatatatatataatatatatatatatatattatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatatat

atatatat

Loaded Successfully! (size = 9,832,696 bytes)

Ignore p_w_picpath authentication!

Save to on-board flash disk? (y/[n]/m) Yes!  //確認下載ScreenOS

Saving system p_w_picpath to on-board flash disk...

Done! (size = 9,832,696 bytes)

Run downloaded system p_w_picpath? ([y]/n) Yes!  //確認執行新的ScreenOS

Start loading...

.................................................................

.................................................................

.................................................................

............................

安裝好ScreenOS以後重啓防火牆，這樣就完成了ScreenOS的回覆，通常來講原有的配置應該還會在，若是配置也丟失了，能夠講之前保存過的配置文件導入。