Learn about the initial setup of a new Junos device.
- [Instructor] Hello and welcome back. In this lecture, we are gonna start with section four. And in the first lecture of section four, we are gonna start with initial configuration. If you're ready, let's begin. So in this first lecture of section four, we are gonna start with some basic initial setup of your Junos device. We'll see how we can set up root authentication. We'll then talk about system services for remote access. We already discussed this in the last section, but we'll discuss it one more time.
We'll then talk about setting a hostname. We'll then see how we can set the system time and the timezone. We'll see how we can set a login message and how we can configure the command line interface idle timeout value. Let's begin. All right, so as you can see, I've logged into a terminal. First of all, I'm gonna go into the configure mode. Now, the first thing that we need to set up is the root authentication password. When you are configuring a brand new Junos device, it is shipped with a factory default configuration.
It has no password on it and you can log in with the username, root. Also, you'll be connecting with the console port. In other words, you'll be using the out-of-band method to connect with the device. Now, right now, I have a Junos device which has some basic configuration on it, which means the root authentication password has already been configured. But I'm gonna show you how to do it one more time. By the way, if you have a brand new device, before you can make any configuration changes on the device, you have to set a root authentication password.
Let's see how we can do that. So I'm in the configuration mode. I'm gonna say set system, root-authentication. Let's do a question mark and we're looking at this option over here, the plain text password. You could also provide an encrypted password if you have that, or you could also provide your password with a file. Using a URL, you could do that. But right now, I'm gonna use this option called as plain text password. So the command would be set system root-authentication plain-text-password.
Let's do a question mark. And we can actually hit Enter right now so I'm gonna do that and we have to provide the password. On a Junos device, the password must be at least six characters in length with a change of case, digits, or punctuations. So I'm gonna put my new password over here. Type it one more time. And it's done. So that's how you would set a root authentication password.
Remember, this is the first thing that you must do if you are configuring a brand new Junos device. Next, we'll see how we can set up system services for remote access. To do this, we're gonna navigate to edit system services and I'm gonna do a show. Now, you should already know this command by now, because we spoke about how to connect to a Junos device in the previous section.
When I hit Enter, you can see that ssh and telnet both have been enabled for remote access. Some people don't like to have telnet on there, because that's not a secure protocol to connect. So ssh is a good idea to connect to your device remotely. If you want to enable access to Jweb, then in the web management section, you need to enable the protocol and then the interface on which you will be making the connection. For example, over here, I have enabled the https protocol and I have three interfaces enabled, vlan0, fe-0/0/1.0, and pp0.0.
You also notice that I am using a system generated certificate, which means when I try to connect with a device, my browser will give me a warning, saying the certificate is not recognized. Next, we'll understand how to configure hostname, system time, and timezone. All of these should look familiar to you, because we've already seen examples of these in previous lectures. But let's do it one more time. I'm gonna go back to the terminal and I'm gonna go to the top of the configuration mode.
To set the hostname, the command would be set system host-name. And I'm gonna type in my hostname. I'm gonna call this one as my-junos. You can put in whatever hostname you like. I'm just gonna say my-junos and hit Enter. As you now know, the hostname will not take effect until you type in the commit command. Before we issue the commit command, let's also see how can we change the timezone.
So we can do it this way. Set system time-zone, and a question mark. And you will have all the timezones listed over here. Now, I'm in India and I'm looking for the Indian timezone. So I'm gonna hit spacebar. And that's the one that I'm looking for, Asia/Calcutta. So I'm gonna do a Ctrl-C and I'm gonna write this way. Asia/Calcutta, hit Tab, and it should auto-complete.
Hit Enter and it works well. On a brand new Junos device, the default timezone is UTC or Coordinated Universal Time. Now, I'm gonna do a commit check just to make sure that there are no errors in my configuration. Looks good. I'm gonna issue a commit command. All right, that's done. And now you can see the hostname has taken effect.
Right, the next thing is to configure the system time or the time of the device. Now, that happens from the operational mode. So I'm gonna do exit and come out of the configuration mode. To set the time and the date, the command would be set date, question mark. Now, as you can see, you can type in the date manually in the format which looks like this or you could also sync-up with an ntp server. But right now, we're gonna set that manually.
So I'm gonna say 2017. The month is 07. The date is 24. The hour is 14. The minute is 19. You have a dot and then the seconds would be 30, hit Enter. And that works fine. So that's how you set the date. Don't forget the timezone happens from the configuration mode, but the date and time happens from the operational mode.
Let's go back to the slides. All right, next, we'll understand how to configure a login message and how to configure the idle timeout value. The login message is useful when you have many administrators managing the device. Typically, this happens in enterprises where you'd like to display a warning message to prevent unauthorized people from logging in. How do we do that? Let's see that on the terminal. To set the login message, we have to go back to the configuration mode.
So I'm gonna do edit. The login message is under the edit system hierarchy. So I'm gonna say set system login message, and a question mark. And you can start typing in your message. I'm gonna start with double quotes. All logins are monitored. Close the double quotes and hit Enter. That works well. I'm gonna do a commit to save my changes.
All right, now to verify if this works well, I'll have to log out and log into the device again. So I'm gonna do exit one more time and I'm gonna try to log in one more time. Hit Enter. And as you can see over here, the login message that we configured is now displayed. So this is a nice option to display a message to all users who are trying to connect to your device. Now, I'm gonna log in.
All right, the last option that we're gonna see is the command line interface timeout. The timeout value for the command line interface is configured from the operational mode. The command for that would be set cli. Let's do a question mark first. And this is the option that we're looking at, idle timeout. So I'm gonna say id and hit a Tab. That fills in for me. We'll do a question mark. So you can give a value between zero and 100,000.
If you are giving a value of zero, that means you are disabling the timeout value. Now, I'm gonna set a timeout value of 60 minutes or in other words, one hour. Hit Enter and that is done. That's all for this lecture, guys. I'd like to thank you for watching and I'll catch you in the next lecture. Thank you.
Completing all three courses in the series will help prepare you to pass the related 65-question certification exam, JN0-102.
- Configuration with the CLI
- Using J-Web
- Configuring user accounts
- Configuring logging
- Configuring SNMP and NTP
- Interface monitoring
- Upgrading Junos