{"id":1107,"date":"2016-08-06T20:16:45","date_gmt":"2016-08-06T19:16:45","guid":{"rendered":"http:\/\/www.safekom.pl\/blog\/?p=1107"},"modified":"2016-08-06T20:16:45","modified_gmt":"2016-08-06T19:16:45","slug":"junos-jak-zabezpieczyc-konfiguracje","status":"publish","type":"post","link":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/","title":{"rendered":"Junos jak zabezpieczy\u0107 konfiguracj\u0119"},"content":{"rendered":"<p>Ostatnio du\u017co siedzia\u0142em na now\u0105 wersja SRX&#8217;a w wersji wirtualnej i odkry\u0142em mo\u017cliwo\u015b\u0107 blokowania konfiguracji poszczeg\u00f3lnych opcji, poni\u017cej przedstawi\u0119 jak zabezpieczy\u0107 jaki\u015b segment konfiguracji.<\/p>\n<p>Do zabezpieczenia konfiguracji s\u0142u\u017cy polecenie protect<\/p>\n<pre class=\"lang:sh decode:true \">root# protect ?   \r\nPossible completions:\r\n&gt; access               Network access configuration\r\n&gt; access-profile       Access profile for this instance\r\n&gt; accounting-options   Accounting data configuration\r\n&gt; applications         Define applications by protocol characteristics\r\n+ apply-groups         Groups from which to inherit configuration data\r\n&gt; chassis              Chassis configuration\r\n&gt; class-of-service     Class-of-service configuration\r\n&gt; event-options        Event processing configuration\r\n&gt; firewall             Define a firewall configuration\r\n&gt; forwarding-options   Configure options to control packet forwarding\r\n&gt; groups               Configuration groups\r\n&gt; interfaces           Interface configuration\r\n&gt; multicast-snooping-options  Multicast snooping option configuration\r\n&gt; policy-options       Policy option configuration\r\n&gt; protocols            Routing protocol configuration\r\n&gt; routing-instances    Routing instance configuration\r\n&gt; routing-options      Protocol-independent routing option configuration\r\n&gt; schedulers           Security scheduler\r\n&gt; security             Security configuration\r\n&gt; services             Set services parameters\r\n&gt; smtp                 Simple Mail Transfer Protocol service configuration\r\n&gt; snmp                 Simple Network Management Protocol configuration\r\n&gt; switch-options       Options for default routing-instance of type virtual-switch\r\n&gt; system               System parameters\r\n&gt; vlans                VLAN configuration<\/pre>\n<p>jak wida\u0107 mo\u017cemy zabezpieczy\u0107 ka\u017cdy element konfiguracji.<\/p>\n<h5>Przyk\u0142ad:<\/h5>\n<p>Zabezpieczamy interfejs sieciowy ge-0\/0\/0<\/p>\n<pre class=\"lang:sh decode:true \">root# protect interfaces ge-0\/0\/0<\/pre>\n<p>wykonujemy commit wychodzimy z trybu konfiguracji i sprawdzamy:<\/p>\n<pre class=\"lang:sh decode:true \">root&gt; show configuration interfaces \r\nprotect: ge-0\/0\/0 {\r\n    vlan-tagging;\r\n    unit 100 {\r\n        vlan-id 100;\r\n        family inet {\r\n            address 10.20.100.100\/24;\r\n        }\r\n    }\r\n}<\/pre>\n<p>po pr\u00f3bie modyfikacji konfiguracji interfejsu ge-0\/0\/0 o opis dostajemy komunikat:<\/p>\n<pre class=\"lang:sh decode:true \">[edit]\r\nroot# set interfaces ge-0\/0\/0 description test \r\nwarning: [interfaces ge-0\/0\/0] is protected, 'interfaces ge-0\/0\/0 description' cannot be created<\/pre>\n<p>aby m\u00f3c wykona\u0107 modyfikacj\u0119 zabezpieczonego interfejsu musimy wykona\u0107 polecenie<\/p>\n<pre class=\"lang:sh decode:true \">[edit]\r\nroot# unprotect interfaces ge-0\/0\/0<\/pre>\n<p>i nie musimy wykonywa\u0107 commitu bo od razu mo\u017cemy modyfikowa\u0107 konfiguracj\u0119.<\/p>\n<pre class=\"lang:sh decode:true \">[edit]\r\nroot# set interfaces ge-0\/0\/0 description test    \r\n\r\n[edit]\r\nroot#<\/pre>\n<p>Mam nadziej\u0119, \u017ce komu\u015b przyda si\u0119 powy\u017cszy wpis.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ostatnio du\u017co siedzia\u0142em na now\u0105 wersja SRX&#8217;a w wersji wirtualnej i odkry\u0142em mo\u017cliwo\u015b\u0107 blokowania konfiguracji poszczeg\u00f3lnych opcji, poni\u017cej przedstawi\u0119 jak zabezpieczy\u0107 jaki\u015b segment konfiguracji. Do zabezpieczenia konfiguracji s\u0142u\u017cy polecenie protect root# protect ? Possible completions: &gt; access Network access configuration &gt; access-profile Access profile for this instance &gt; accounting-options Accounting data configuration &gt; applications Define [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[5],"tags":[70,73,300,302,301],"class_list":["post-1107","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-juniper","tag-juniper","tag-junos","tag-junos-vsrx","tag-junos-zabezpieczenie-konfiguracji","tag-protect"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Junos jak zabezpieczy\u0107 konfiguracj\u0119 - SafeKom Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/\" \/>\n<meta property=\"og:locale\" content=\"pl_PL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Junos jak zabezpieczy\u0107 konfiguracj\u0119 - SafeKom Blog\" \/>\n<meta property=\"og:description\" content=\"Ostatnio du\u017co siedzia\u0142em na now\u0105 wersja SRX&#8217;a w wersji wirtualnej i odkry\u0142em mo\u017cliwo\u015b\u0107 blokowania konfiguracji poszczeg\u00f3lnych opcji, poni\u017cej przedstawi\u0119 jak zabezpieczy\u0107 jaki\u015b segment konfiguracji. Do zabezpieczenia konfiguracji s\u0142u\u017cy polecenie protect root# protect ? Possible completions: &gt; access Network access configuration &gt; access-profile Access profile for this instance &gt; accounting-options Accounting data configuration &gt; applications Define [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/\" \/>\n<meta property=\"og:site_name\" content=\"SafeKom Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/safekompl\" \/>\n<meta property=\"article:published_time\" content=\"2016-08-06T19:16:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/12\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"189\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Micha\u0142 Iwa\u0144czuk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MIwaczuk\" \/>\n<meta name=\"twitter:site\" content=\"@MIwaczuk\" \/>\n<meta name=\"twitter:label1\" content=\"Napisane przez\" \/>\n\t<meta name=\"twitter:data1\" content=\"Micha\u0142 Iwa\u0144czuk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Szacowany czas czytania\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minuta\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/\"},\"author\":{\"name\":\"Micha\u0142 Iwa\u0144czuk\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/person\\\/fd4cc931b624af4b7353d36d92ba7181\"},\"headline\":\"Junos jak zabezpieczy\u0107 konfiguracj\u0119\",\"datePublished\":\"2016-08-06T19:16:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/\"},\"wordCount\":109,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/12\\\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1\",\"keywords\":[\"Juniper\",\"Junos\",\"junos vsrx\",\"junos zabezpieczenie konfiguracji\",\"protect\"],\"articleSection\":[\"Juniper\"],\"inLanguage\":\"pl-PL\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/\",\"name\":\"Junos jak zabezpieczy\u0107 konfiguracj\u0119 - SafeKom Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/12\\\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1\",\"datePublished\":\"2016-08-06T19:16:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/#breadcrumb\"},\"inLanguage\":\"pl-PL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/12\\\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/12\\\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1\",\"width\":300,\"height\":189},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/juniper\\\/junos-jak-zabezpieczyc-konfiguracje\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Strona g\u0142\u00f3wna\",\"item\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Junos jak zabezpieczy\u0107 konfiguracj\u0119\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/\",\"name\":\"SafeKom Blog\",\"description\":\"Notatki Architekta i in\u017cyniera zwi\u0105zanego rozwi\u0105zaniami on-prem\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pl-PL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#organization\",\"name\":\"SafeKom Blog\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/05\\\/cropped-logo.png?fit=512%2C512&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/05\\\/cropped-logo.png?fit=512%2C512&ssl=1\",\"width\":512,\"height\":512,\"caption\":\"SafeKom Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/safekompl\",\"https:\\\/\\\/x.com\\\/MIwaczuk\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/michaliwanczuk\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/person\\\/fd4cc931b624af4b7353d36d92ba7181\",\"name\":\"Micha\u0142 Iwa\u0144czuk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g\",\"caption\":\"Micha\u0142 Iwa\u0144czuk\"},\"description\":\"Pasjonat komputerowy od zawsze oraz maniak w zakresie sieci, wirtualizacji oraz bezpiecze\u0144stwa IT. Kompetentny in\u017cynier z du\u017cym do\u015bwiadczeniem w realizacji projekt\u00f3w informatycznych i telekomunikacyjnych. Wieloletni administrator IT, kt\u00f3ry utrzymuje systemy informatyczne dostosowuj\u0105c je do wymog\u00f3w biznesowych z zapewnieniem dost\u0119pno\u015bci 24\\\/7\\\/365.\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Junos jak zabezpieczy\u0107 konfiguracj\u0119 - SafeKom Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/","og_locale":"pl_PL","og_type":"article","og_title":"Junos jak zabezpieczy\u0107 konfiguracj\u0119 - SafeKom Blog","og_description":"Ostatnio du\u017co siedzia\u0142em na now\u0105 wersja SRX&#8217;a w wersji wirtualnej i odkry\u0142em mo\u017cliwo\u015b\u0107 blokowania konfiguracji poszczeg\u00f3lnych opcji, poni\u017cej przedstawi\u0119 jak zabezpieczy\u0107 jaki\u015b segment konfiguracji. Do zabezpieczenia konfiguracji s\u0142u\u017cy polecenie protect root# protect ? Possible completions: &gt; access Network access configuration &gt; access-profile Access profile for this instance &gt; accounting-options Accounting data configuration &gt; applications Define [&hellip;]","og_url":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/","og_site_name":"SafeKom Blog","article_publisher":"https:\/\/www.facebook.com\/safekompl","article_published_time":"2016-08-06T19:16:45+00:00","og_image":[{"width":300,"height":189,"url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/12\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1","type":"image\/jpeg"}],"author":"Micha\u0142 Iwa\u0144czuk","twitter_card":"summary_large_image","twitter_creator":"@MIwaczuk","twitter_site":"@MIwaczuk","twitter_misc":{"Napisane przez":"Micha\u0142 Iwa\u0144czuk","Szacowany czas czytania":"1 minuta"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/#article","isPartOf":{"@id":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/"},"author":{"name":"Micha\u0142 Iwa\u0144czuk","@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/person\/fd4cc931b624af4b7353d36d92ba7181"},"headline":"Junos jak zabezpieczy\u0107 konfiguracj\u0119","datePublished":"2016-08-06T19:16:45+00:00","mainEntityOfPage":{"@id":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/"},"wordCount":109,"commentCount":0,"publisher":{"@id":"https:\/\/www.safekom.pl\/blog\/#organization"},"image":{"@id":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/12\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1","keywords":["Juniper","Junos","junos vsrx","junos zabezpieczenie konfiguracji","protect"],"articleSection":["Juniper"],"inLanguage":"pl-PL","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/","url":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/","name":"Junos jak zabezpieczy\u0107 konfiguracj\u0119 - SafeKom Blog","isPartOf":{"@id":"https:\/\/www.safekom.pl\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/#primaryimage"},"image":{"@id":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/12\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1","datePublished":"2016-08-06T19:16:45+00:00","breadcrumb":{"@id":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/#breadcrumb"},"inLanguage":"pl-PL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/"]}]},{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/#primaryimage","url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/12\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/12\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1","width":300,"height":189},{"@type":"BreadcrumbList","@id":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-jak-zabezpieczyc-konfiguracje\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Strona g\u0142\u00f3wna","item":"https:\/\/www.safekom.pl\/blog\/"},{"@type":"ListItem","position":2,"name":"Junos jak zabezpieczy\u0107 konfiguracj\u0119"}]},{"@type":"WebSite","@id":"https:\/\/www.safekom.pl\/blog\/#website","url":"https:\/\/www.safekom.pl\/blog\/","name":"SafeKom Blog","description":"Notatki Architekta i in\u017cyniera zwi\u0105zanego rozwi\u0105zaniami on-prem","publisher":{"@id":"https:\/\/www.safekom.pl\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.safekom.pl\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pl-PL"},{"@type":"Organization","@id":"https:\/\/www.safekom.pl\/blog\/#organization","name":"SafeKom Blog","url":"https:\/\/www.safekom.pl\/blog\/","logo":{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/05\/cropped-logo.png?fit=512%2C512&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/05\/cropped-logo.png?fit=512%2C512&ssl=1","width":512,"height":512,"caption":"SafeKom Blog"},"image":{"@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/safekompl","https:\/\/x.com\/MIwaczuk","https:\/\/www.linkedin.com\/in\/michaliwanczuk\/"]},{"@type":"Person","@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/person\/fd4cc931b624af4b7353d36d92ba7181","name":"Micha\u0142 Iwa\u0144czuk","image":{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/secure.gravatar.com\/avatar\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g","caption":"Micha\u0142 Iwa\u0144czuk"},"description":"Pasjonat komputerowy od zawsze oraz maniak w zakresie sieci, wirtualizacji oraz bezpiecze\u0144stwa IT. Kompetentny in\u017cynier z du\u017cym do\u015bwiadczeniem w realizacji projekt\u00f3w informatycznych i telekomunikacyjnych. Wieloletni administrator IT, kt\u00f3ry utrzymuje systemy informatyczne dostosowuj\u0105c je do wymog\u00f3w biznesowych z zapewnieniem dost\u0119pno\u015bci 24\/7\/365.","url":"https:\/\/www.safekom.pl\/blog\/author\/admin\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/12\/Junos_sw_logo.jpg?fit=300%2C189&ssl=1","jetpack_shortlink":"https:\/\/wp.me\/p7i9ri-hR","jetpack-related-posts":[{"id":247,"url":"https:\/\/www.safekom.pl\/blog\/juniper\/juniper-ex2200-virtual-chassis-lab\/","url_meta":{"origin":1107,"position":0},"title":"Juniper Ex2200 &#8211; Virtual Chassis lab","author":"Micha\u0142 Iwa\u0144czuk","date":"22.07.2015","format":false,"excerpt":"Od wersji Junos 12.1 jest mo\u017cliwe stworzenie Virtual Chassis ze switcha EX2200 z wykorzystanie port\u00f3w uplinkowych. Co nam da stworzenie VC (Virtual Chassis) \u00a0przede wszystkim wyeliminowanie Spanning \u00a0Tree w sieci, zazwyczaj urz\u0105dzenia klasy EX2200 u\u017cywane s\u0105 jako access, pod\u0142\u0105czone do switchy dystrybucyjnych. Nie b\u0119dziemy marnotrawi\u0107 port\u00f3w gdy mamy STP w\u2026","rel":"","context":"W \u201eJuniper&quot;","block_context":{"text":"Juniper","link":"https:\/\/www.safekom.pl\/blog\/category\/juniper\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/junos_multicolor_burst.png?fit=361%2C393&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":519,"url":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-cisco-ise-aaa-dla-junipera\/","url_meta":{"origin":1107,"position":1},"title":"Lab &#8211; Cisco ISE &#8211; AAA dla Junosa","author":"Micha\u0142 Iwa\u0144czuk","date":"09.02.2016","format":false,"excerpt":"W poprzednich wpisach opisa\u0142em jak zainstalowa\u0107 oraz jak pod\u0142\u0105czy\u0107 do AD ISE. Poni\u017cej opisz\u0119 jak wykorzysta\u0107 ISE jak radius kt\u00f3ry b\u0119dzie serwowa\u0107 u\u017cytkownik\u00f3w do logowania po ssh i www dla urz\u0105dze\u0144 Juniper pod systemem Junos. Jak centralne repozytorium u\u017cytkownik\u00f3w b\u0119dzie s\u0142u\u017cy\u0107 AD. Mam nadziej\u0119 \u017ce komu\u015b si\u0119 przyda. Bierzemy si\u0119\u2026","rel":"","context":"W \u201eCisco&quot;","block_context":{"text":"Cisco","link":"https:\/\/www.safekom.pl\/blog\/category\/cisco\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/02\/Juniper-Networks-and-Cisco-Systems.png?fit=712%2C534&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/02\/Juniper-Networks-and-Cisco-Systems.png?fit=712%2C534&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/02\/Juniper-Networks-and-Cisco-Systems.png?fit=712%2C534&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/02\/Juniper-Networks-and-Cisco-Systems.png?fit=712%2C534&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":221,"url":"https:\/\/www.safekom.pl\/blog\/brocade\/brocade-650-backaup-oraz-odtworzenie-konfiguracji-zon\/","url_meta":{"origin":1107,"position":2},"title":"Brocade 650 &#8211; Backaup oraz odtworzenie konfiguracji zon","author":"Micha\u0142 Iwa\u0144czuk","date":"19.06.2015","format":false,"excerpt":"Poni\u017cej opis jak szybko wykona\u0107 backup oraz otworzy\u0107 pomi\u0119dzy switchami konfiguracj\u0119 Zon Wykonanie backupu: \u00a0>configupload Protocol (scp, ftp, sftp, local) [ftp]: \/\/wybieramy spos\u00f3b wykonania backupu Server Name or IP Address [host]: \/\/ IP lub FQDN serwera w mym przypadku serwera FTP User Name [user]: user \/\/ login do serwera FTP\u2026","rel":"","context":"W \u201eBrocade&quot;","block_context":{"text":"Brocade","link":"https:\/\/www.safekom.pl\/blog\/category\/brocade\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":271,"url":"https:\/\/www.safekom.pl\/blog\/juniper\/junos-aktulizacja\/","url_meta":{"origin":1107,"position":3},"title":"Junos &#8211; aktulizacja","author":"Micha\u0142 Iwa\u0144czuk","date":"20.08.2015","format":false,"excerpt":"Poni\u017cej przedstawiam m\u00f3j spos\u00f3b na aktualizacj\u0119 Junos czy to w SRX'ie czy to na switchu EX Co potrzebujemy: serwer ftp - pami\u0119tajmy o systemie antywirusowym cz\u0119sto blokuje dost\u0119p do ftp pod Windowsem. dost\u0119p do urz\u0105dzenia Wykonujemy kroki Logujemy si\u0119 na urz\u0105dzenie \u00a0do shella przechodzimy do katalogu \/var\/tmp uruchamiamy klienta ftp\u2026","rel":"","context":"W \u201eJuniper&quot;","block_context":{"text":"Juniper","link":"https:\/\/www.safekom.pl\/blog\/category\/juniper\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/junos_multicolor_burst.png?fit=361%2C393&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":460,"url":"https:\/\/www.safekom.pl\/blog\/juniper\/juniper-ograniczenie-dostepu-do-managmentu\/","url_meta":{"origin":1107,"position":4},"title":"Juniper &#8211; ograniczenie dost\u0119pu do managmentu","author":"Micha\u0142 Iwa\u0144czuk","date":"30.12.2015","format":false,"excerpt":"Poni\u017cej przedstawiam jak ograniczy\u0107 dost\u0119p dla wybranej listy sieci oraz host\u00f3w do ssh i https dla urz\u0105dze\u0144 Juniper. Definiujemy grup\u0119 kt\u00f3ra b\u0119dzie mia\u0142a dost\u0119p do ssh i https set policy-options prefix-list management-hosts 10.0.0.0\/8 set policy-options prefix-list management-hosts 172.16.0.0\/12 set policy-options prefix-list management-hosts sie\u0107_public\/24 Definiujemy filtr\u00a0kt\u00f3ry blokuje dost\u0119p do ssh oraz\u2026","rel":"","context":"W \u201eJuniper&quot;","block_context":{"text":"Juniper","link":"https:\/\/www.safekom.pl\/blog\/category\/juniper\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1220,"url":"https:\/\/www.safekom.pl\/blog\/huawei\/nowe-urzadzenie-na-warsztacie-czyli-pierwsze-starcie-z-huawei-usg\/","url_meta":{"origin":1107,"position":5},"title":"nowe urz\u0105dzenie na warsztacie &#8211; czyli pierwsze starcie z Huawei USG","author":"Micha\u0142 Iwa\u0144czuk","date":"14.10.2016","format":false,"excerpt":"Po d\u0142ugim poszukiwaniu dost\u0119pu do urz\u0105dzenia Huawei z rodziny firewall, dzi\u0119ki uprzejmo\u015bci firmy S4E, uda\u0142o mi si\u0119 dosta\u0107 w r\u0119ce model\u00a0USG6330. Zobaczymy co przys\u0142owiowy \"chi\u0144czyk\" potrafi i jak bardzo r\u00f3\u017cni si\u0119 on od mo\u017cliwo\u015bci urz\u0105dze\u0144 typu PaloAlto czy Fortinet. Nie b\u0119d\u0119 tutaj si\u0119 skupia\u0107 na aspektach wydajno\u015bciowych - nie b\u0119d\u0119\u2026","rel":"","context":"W \u201eHuawei&quot;","block_context":{"text":"Huawei","link":"https:\/\/www.safekom.pl\/blog\/category\/huawei\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/10\/Huawei-Logo-e1394619656563.png?fit=400%2C389&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/posts\/1107","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/comments?post=1107"}],"version-history":[{"count":0,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/posts\/1107\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/media\/463"}],"wp:attachment":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/media?parent=1107"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/categories?post=1107"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/tags?post=1107"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}