Juniper SRX防火墙默认保存50份最近修改过的配置归档，如下所示：

netscreen@SRX3600# rollback ?
Possible completions:
  <[Enter]>            Execute this command
  0                    2010-08-20 22:14:53 HKT by netscreen via cli 
  1                    2010-08-20 22:06:04 HKT by netscreen via cli 
  2                    2010-08-20 22:05:02 HKT by netscreen via cli 
  3                    2010-08-20 17:12:27 HKT by netscreen via cli 
  4                    2010-08-20 15:49:18 HKT by netscreen via cli 
  5                    2010-08-18 17:09:15 HKT by netscreen via cli 
  6                    2010-08-18 17:06:43 HKT by netscreen via cli 
  7                    2010-08-18 16:47:52 HKT by netscreen via cli 
  8                    2010-08-18 16:03:22 HKT by netscreen via cli 
  9                    2010-08-18 14:55:11 HKT by netscreen via cli 
  10                   2010-08-18 14:45:24 HKT by netscreen via cli 
  11                   2010-08-18 14:43:27 HKT by netscreen via cli 
  12                   2010-08-18 14:39:12 HKT by netscreen via cli 
  13                   2010-08-17 15:39:36 HKT by netscreen via cli 
  14                   2010-08-17 15:34:28 HKT by netscreen via cli 
  15                   2010-08-17 15:15:02 HKT by netscreen via cli 
  16                   2010-08-17 15:11:50 HKT by netscreen via cli 
  17                   2010-08-17 15:08:12 HKT by netscreen via cli 
  18                   2010-08-17 15:05:21 HKT by netscreen via cli 
  19                   2010-08-17 14:58:07 HKT by netscreen via cli 
  20                   2010-08-17 14:53:11 HKT by netscreen via cli 
  21                   2010-08-17 14:40:45 HKT by netscreen via cli 
  22                   2010-08-17 14:40:22 HKT by netscreen via cli 
  23                   2010-08-17 14:38:16 HKT by netscreen via cli 
  24                   2010-08-17 14:36:49 HKT by netscreen via cli 
  25                   2010-08-10 16:34:56 HKT by netscreen via cli 
  26                   2010-08-10 16:32:43 HKT by netscreen via cli 
  27                   2010-08-10 15:29:42 HKT by netscreen via cli 
  28                   2010-08-10 15:08:20 HKT by netscreen via cli 
  29                   2010-08-10 15:04:59 HKT by netscreen via cli 
  30                   2010-08-10 15:03:32 HKT by netscreen via cli 
  31                   2010-08-10 14:56:15 HKT by netscreen via cli 
  32                   2010-08-10 14:54:37 HKT by netscreen via cli 
  33                   2010-08-10 14:51:08 HKT by netscreen via cli 
  34                   2010-08-10 14:44:23 HKT by netscreen via cli 
  35                   2010-08-10 14:16:26 HKT by netscreen via cli 
  36                   2010-08-10 10:52:15 HKT by netscreen via cli 
  37                   2010-08-10 10:51:03 HKT by netscreen via cli 
  38                   2010-08-10 10:49:51 HKT by netscreen via cli 
  39                   2010-08-09 14:53:37 HKT by netscreen via cli 
  40                   2010-08-06 18:15:34 HKT by netscreen via cli 
  41                   2010-08-06 17:38:34 HKT by netscreen via cli 
  42                   2010-08-06 17:37:20 HKT by netscreen via cli 
  43                   2010-08-06 17:16:57 HKT by netscreen via cli 
  44                   2010-08-06 17:13:39 HKT by netscreen via cli 
  45                   2010-08-06 16:50:02 HKT by netscreen via cli 
  46                   2010-08-06 16:39:22 HKT by netscreen via cli 
  47                   2010-08-06 16:29:12 HKT by netscreen via cli 
  48                   2010-08-06 16:28:10 HKT by netscreen via cli 
  49                   2010-08-06 16:27:12 HKT by netscreen via cli 
  |                    Pipe through a command

在需要回滚配置时，如果加上一段简单的注释将让你能确定系统将恢复到你希望的得到的恢复版本中。

netscreen@SRX3600# delete security ike gateway dialup-ike no-nat-traversal   

[edit]
netscreen@SRX3600# commit comment "enable ike gateway dialup-ike nat-t"

/* 在激活配置的同时，为该配置加入注释 —— 激活那天ike gateway nat穿透功能 */
netscreen@SRX3600# run show system commit    
0   2010-08-20 22:14:53 HKT by netscreen via cli
    enable ike gateway dialup-ike nat-t
1   2010-08-20 22:06:04 HKT by netscreen via cli
2   2010-08-20 22:05:02 HKT by netscreen via cli
3   2010-08-20 17:12:27 HKT by netscreen via cli
4   2010-08-20 15:49:18 HKT by netscreen via cli
5   2010-08-18 17:09:15 HKT by netscreen via cli
6   2010-08-18 17:06:43 HKT by netscreen via cli
7   2010-08-18 16:47:52 HKT by netscreen via cli
8   2010-08-18 16:03:22 HKT by netscreen via cli
9   2010-08-18 14:55:11 HKT by netscreen via cli
10  2010-08-18 14:45:24 HKT by netscreen via cli
11  2010-08-18 14:43:27 HKT by netscreen via cli
12  2010-08-18 14:39:12 HKT by netscreen via cli
13  2010-08-17 15:39:36 HKT by netscreen via cli
14  2010-08-17 15:34:28 HKT by netscreen via cli
15  2010-08-17 15:15:02 HKT by netscreen via cli
16  2010-08-17 15:11:50 HKT by netscreen via cli
                                        
[edit]