Dell PowerConnect J-SRX100SU User manual

Dell PowerConnect J-Series
J-SRX100S/SU Services Gateway
Getting Started Guide

2 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
This Getting Started Guide provides instructions for basic installation and configuration of the Dell PowerConnect J-Series
J-SRX100S/SU Services Gateway.
Document Contents
1 Getting Started with the Dell PowerConnect J-Series J-SRX100S/SU Services Gateway .......3
2 Setting Up Your Network .............................................................6
3 Performing Advanced Network Configuration ..........................................19
4 Enabling Security Services ...........................................................25
5 Powering Off the Device .............................................................40
6 Support and Training Options ........................................................41

Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide 3
1 Getting Started with the Dell PowerConnect J-Series
J-SRX100S/SU Services Gateway
The Dell PowerConnect J-Series J-SRX100S/SU Services Gateway offers features that provide complete functionality and flexibility
for delivering secure Internet and intranet access. The services gateway offers stable, reliable, and efficient IP routing in addition to
switching support and LAN connectivity. The device provides firewall, anti-virus, anti-spam, anti-spyware, Web filtering, IP Security
(IPsec), and virtual private network (VPN) services for small-sized and medium-sized companies. The services gateway can be
connected directly to traditional private networks such as leased lines, Frame Relay, or MPLS or to the public Internet. The services
gateway runs the Junos operating system (Junos OS).
This chapter provides the Dell PowerConnect J-Series J-SRX100S/SU Services Gateway front and back panel views and the package
content information.
Section 1 Contents
1.1 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Front Panel .................4
1.2 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Back Panel..................4
1.3 Checking the Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Package
Contents ..........................................................................5

4 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
1.1 Dell PowerConnect J-Series J-SRX100S/SU
Services Gateway Front Panel
1.2 Dell PowerConnect J-Series J-SRX100S/SU
Services Gateway Back Panel
Console Port
Po
wer Buon
USB Port
Reset Config Buon
LED
10/100 Ethernet
Provide 10/100 Ethernet
connecvity vlan0
192.168.1.1/24
For connecon to
Junos Command-line
interface
ALARM - minor/major alarm
POWER - device is powered on
STATUS - device is funconing
HA - device is part of chassis
clustering
For use with Dell-supported
USB storage devices
On (I) and Off (o)
power
Restore the device to the
factory default
configuraon
fe-0/0/0
DHCP Client
10/100 Ethernet
Lock
For holding the
power cord on the
power supply
Grounding PointCable Tie Holder
Power Supply Point
DC power connecon
for use with
the supplied power cable
For securing the device to
the installaon site
For grounding the
device to earth

Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide 5
1.3 Checking the Dell PowerConnect J-Series
J-SRX100S/SU Services Gateway Package
Contents
Before setting up your Dell PowerConnect J-Series
J-SRX100S/SU Services Gateway, verify that your package
contains the following parts:
• Dell PowerConnect J-Series J-SRX100S/SU Services Gateway
• DB9 > RJ-45 cable
• Quick Start Guide
• Getting Started Guide
• Safety and Environmental Regulation Information (SERI)
• End-User License Agreement (EULA)
• Registration and Software Updates information
• Warranty and support Information (WSI)
• Open Source Code Notice
1.3.1 Any Items Missing?
If any items are missing from your package, contact Dell
customer support at www.support.dell.com.
NOTE: If you have purchased a UTM subscription, the
license authorization codes certificate will be shipped
separately in an envelope. You will need this certificate
to set up security services for your gateway.
NOTE: The power supply adapter and the power cord are
shipped in a separate box.

6 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
Section 2 Contents
2.1 Recording Configuration Information.................................................7
2.2 Connecting the Device..............................................................8
2.3 Verifying Internet Connectivity .....................................................10
2.4 Understanding the Default Configuration Settings..................................... 11
2.5 Verifying the System Requirements .................................................. 11
2.6 Accessing the J-Web Interface ...................................................... 11
2.7 Configuring the Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.8 Verifying the Configuration ........................................................17
This chapter provides preconfiguration and configuration instructions for connecting your Dell PowerConnect J-Series J-SRX100S/SU
Services Gateway. Review this chapter to set up your services gateway.
2 Setting Up Your Network

Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide 7
2.1 Recording Configuration Information
This section provides the following information:
2.1.1 Registration Information
2.1.2 Login Information
2.1.3 Internet Service Provider Information
2.1.1 Registration Information
NOTE: If you have not purchased the UTM or IDP
licenses, do not proceed with the instructions provided
in this section.
Use the following information when you are enabling Unified
Threat Management (UTM)/Intrusion Detection and Prevention
(IDP) licenses on the device.
Serial Number Record the serial number found on
the bottom of the chassis of your Dell
PowerConnect J-Series J-SRX100S/SU
Services Gateway.
Authorization Code Record the authorization code provided
by Dell.
NOTE: Use the authorization
code only if you have purchased
subscription licenses for UTM and
IDP.
2.1.2 Login Information
Use the following default username and password information
for the first time login. Record this information for your future
reference.
Username Select an administrator account name.
Default is root.
Password Password is not required. Leave this box
blank.

8 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
2.1.3 Internet Service Provider Information
Use the following information to connect to the Internet when
your Internet Service Provider (ISP) provides the static settings
such as IP address, Domain Name Server (DNS), and so on.
NOTE: Do not use this information if your ISP uses
Dynamic Host Configuration Protocol (DHCP).
IF YOU CONNECT USING PLEASE RECORD
DHCP
No information is usually required,
although some providers may require a
hostname.
Hostname:
IF YOU CONNECT USING PLEASE RECORD
Static IP
IP Address:
Subnet Mask:
Default Gateway:
Primary DNS:
DNS 2 (optional):
DNS 3 (optional):
2.2 Connecting the Device
This section covers the following tasks:
2.2.1 Connecting the Power Cable to the Device
2.2.2 Connecting the Management Device
2.2.3 Connecting to Your Internet Service Provider

Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide 9
2.2.1 Connecting the Power Cable to the Device
To connect the power cable to the device:
1. Plug the DC connector end of the power cable in to the
power connector on the back of the device.
2. Plug the AC adapter end of the power cable in to an AC
power outlet. We recommend using a surge protector.
Note the following indications (see “1.1 Dell PowerConnect
J-Series J-SRX100S/SU Services Gateway Front Panel”):
- POWER LED (green): The device is receiving power.
- STATUS LED (green): The device is operating normally.
- ALARM LED (amber): The device is operating normally, but a
rescue configuration has not yet been set. This is not a panic
condition, however.
NOTE: Initially, if the rescue configuration has not been
set, a steadily amber ALARM LED indicates a minor alarm
condition, and a steadily red ALARM LED indicates that a
major alarm condition on the services gateway.
NOTE: You must allow the device between 5 and 7
minutes to boot fully after you have powered it on. Wait
until the STATUS LED is steadily green before proceeding
to “2.2.2 Connecting the Management Device.”
2.2.2 Connecting the Management Device
Connect the management device to the services gateway using
an RJ-45 cable (Ethernet cable) from any one of the fe-0/0/1
through fe-0/0/7 ports on the front panel to the Ethernet port
on the management device.
Figure 1: Connecting the Management Device to the Services
Gateway
Internet
Trust Zone
Untrust Zone
DHCP Client
Vlan0
Management
Devices
fe-0/0/0
fe-0/0/1 to fe-0/0/7
DHCP Server

10 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
After you connect the management device to the services
gateway, the DHCP server process on the services gateway
automatically assigns an IP address to the management device.
Ensure that the management device acquires an IP address in
the range of 192.168.1.2 through 192.168.1.254 from the services
gateway.
NOTE: For the services gateway to assign an IP address
to the management device, the management device
must be set up to connect using DHCP.
If an IP address is not assigned to the management
device, you can manually configure an IP address in
the range of 192.168.1.2/24 through 192.168.1.99/24.
Ensure you do not use 192.168.1.1, as this IP address is
configured on the services gateway.
2.2.3 Connecting to Your Internet Service Provider
Connect the fe-0/0/0 port on the Dell PowerConnect J-Series
J-SRX100S/SU Services Gateway to your ISP or Internet (see
“Figure 1: Connecting the Management Device to the Services
Gateway”). The DHCP server that resides in your ISP network
provides the necessary settings (such as default route, DNS, and
so on) to the services gateway to connect to the Internet.
NOTE: If you are using a static IP address to connect to
the provider’s network, do not perform “2.3 Verifying
Internet Connectivity.” To access the Internet from your
management device (workstation or laptop), you need
to first configure the static IP address on the fe-0/0/0
interface and configure a default route.
2.3 Verifying Internet Connectivity
With a default configuration of the Dell PowerConnect J-Series
J-SRX100S/SU Services Gateway, you can access the Internet
when you connect the management device into any one of
the Ethernet ports (fe-0/0/1 through fe-0/0/7) and your ISP is
connected to the fe-0/0/0 port. For more information on default
configuration, see “2.4 Understanding the Default Configuration
Settings.”
Now you can browse the Internet from your management
device. For example, type www.dell.com in your browser.
NOTE: If you are using DHCP to verify the network
settings from your service provider, verify your Internet
connectivity. If you are using a static IP address to
connect to the provider’s network, do not verify the
internet connectivity.

Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide 11
2.4 Understanding the Default Configuration
Settings
The device has the following default configuration settings when
you power it on for the first time (for more information on trust
and untrust zones, see “3.1 Zones and Interfaces Overview”):
Factory Default Settings
PORT
LABEL INTERFACE SECURITY ZONE
DHCP
STATE IP ADDRESS
0/0 fe-0/0/0 untrust client Unassigned
0/1 to 0/7 fe-0/0/1 to
fe-0/0/7
trust server 192.168.1.1/24
SOURCE ZONE DESTINATION ZONE POLICY ACTION
For Security Policies
trust untrust permit
trust trust permit
untrust trust deny
For NAT Rule
trust untrust source NAT to untrust
zone interface
2.5 Verifying the System Requirements
Before you begin the setup process, verify that you have one of
the following supported browsers:
ICON ACCEPTED BROWSER BROWSER VERSION
NUMBER
Internet Explorer 7.0 and later
Mozilla Firefox 3.0 and later
2.6 Accessing the J-Web Interface
To access the J-Web interface:
1. Launch a Web browser on the management device or PC.
2. Enter http://192.168.1.1 in the URL address box. The J-Web
login page appears.
3. Specify the default username as root. Do not enter any value
in the Password box.
4. Click Log In. The first time you log in, the J-Web Initial Setup
page appears.

12 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
NOTE: The J-Web interface will take between 1 and 2
minutes for displaying the initial setup page, only Host
Name and Root Password is mandatory. Other fields are
optional.
5. Enter the hostname and root password. You can also
configure DNS server, time zone, and so on, on this page.
6. Click Apply.
7. Click Commit Options on the top right corner and click
Commit.
8. If you have used a static IP address to configure an IP
address on your services gateway, ensure that you make the
following J-Web modifications:
a. Clear the Enable DHCP on fe-0/0/0.0 check box.
b. Enter the manual IP address provided by your ISP in the
fe-0/0/0.0 address box. The IP address must be entered
in the a.b.c.d/xx format, where xx is the subnet mask.
c. Enter the IP address of the gateway in the Default
Gateway box. Your ISP provides the IP address for the
gateway.
d. Enter server names in the DNS name servers box. Your
ISP provides the server names.
e. Click Apply. The J-Web login page appears again.
f. Enter the username and password and click Log In. After
successful login, the Dashboard page appears.

Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide 13
9. Access the Internet from your management device.
For example, type www.dell.com in your browser. This
connectivity ensures that you can pass traffic through the
services gateway. For more information on verification, see
“2.8 Verifying the Configuration.”
2.7 Configuring the Basic Settings
This section covers the following configuration tasks:
2.7.1 Setting the System Hostname, Domain Name Server, and
Root Authentication
2.7.2 Setting the Date and Time
2.7.3 Creating a User Account
2.7.4 Assigning a Static IP Address to the WAN-Facing Interface
2.7.5 Creating a Default Route to the WAN Interface
2.7.6 Applying the Basic Configuration Settings
2.7.1 Setting the System Hostname, Domain Name
Server, and Root Authentication
If you have not configured the hostname and DNS settings in the
J-Web Initial Setup page, to set or change the hostname, DNS
settings, or the root authentication password:
1. Click the Configure tab at the top of the page and navigate
to System Properties > System Identity.
2. Click Edit and enter the hostname and root password.
3. Click Add and enter the DNS server IP address. For example,
208.67.222.222.

14 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
4. Click OK and then click OK again.
5. Click Commit to save the basic configuration.
2.7.2 Setting the Date and Time
You can synchronize the Dell PowerConnect J-Series
J-SRX100S/SU Services Gateway clock using three options:
Manual, management device clock, or NTP Server.
To set the date and time:
1. Click the Configure tab at the top of the page and navigate
to System Properties > Date Time.
2. Click Edit at the top right corner of the page, and then select
your required time zone from the list.
3. Select the set time options in Set time.
4. Click OK.

Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide 15
2.7.4 Assigning a Static IP Address to the WAN-Facing
Interface
To assign a static IP address to the WAN-facing (internet)
interface:
1. Click the Configure tab at the top of the page and navigate
to Interfaces.
2. Expand fe-0/0/0 and select the logical interface.
3. Click Edit and select the zone as untrust from the list.
4. Click the IPv4 Address tab.
5. Select Enable address configuration and then select the
IPv4 Address check box.
NOTE: The IPv4 Address check box must be selected
before the Add button is automatically enabled.
2.7.3 Creating a User Account
To configure a user (other than an administrative account) and to
set different permissions while accessing the Dell PowerConnect
J-Series J-SRX100S/SU Services Gateway:
1. Click the Configure tab at the top of the page and choose
System Properties > User Management.
2. Click Edit at the top right corner of the page, and then click
Add.
3. Enter the username and password.
4. Select the required permission from the list in Login class.
5. Click OK.

16 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
6. Click Add and enter the IP address and subnet mask provided
by your ISP.
7. Click OK.
2.7.5 Creating a Default Route to the WAN Interface
NOTE: Creating a default route is required only if you
have used a static IP address.
To create a default route to the WAN interface:
1. Click the Configure tab at the top of the page and navigate
to Routing > Static Routing.
2. Click Add.
3. Enter the IP address as 0.0.0.0 and the Subnet mask as
0.0.0.0.
NOTE: While adding the next hop, the field is separated
by tabs instead of dots.

Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide 17
4. Click Add in Nexthop and enter the default gateway IP
address provided by your ISP.
5. Click OK.
2.7.6 Applying the Basic Configuration Settings
When you edit a configuration, you work in a copy of the current
configuration to create a candidate configuration. The changes
you make to the candidate configuration are visible through
the user interface immediately, but do not take effect on the
device until you commit the changes. When you commit the
configuration, the candidate file is checked for proper syntax,
activated, and marked as the current, operational software
configuration file.
To save the configuration, select Commit Options on the top
right corner of the page and click Commit.
NOTE: You can commit your configuration settings at the
end of each task or you can commit all the configuration
settings at one time.
2.8 Verifying the Configuration
To verify the basic configuration, access any external website (for
example, www.dell.com), to ensure that you are connected to
the Internet.
If you are unable to connect to Internet from your management
PC, verify the following:
1. In the J-Web interface, click the Troubleshoot tab and then
click Ping Host.
2. Enter www.dell.com in Remote Host and click Start. If your
ping is successful go to Step 3, otherwise go to Step 4.
3. Ensure the Management PC has acquired IP address (in the
range 192.168.1.2 through 192.168.1.99) and DNS settings
from the services gateway. If the PC acquired the correct IP
address/DNS and you are still not able to access internet, go
to Step 5.

18 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
4. To ensure that the services gateway has the default route
(0.0.0.0) when you are using DHCP:
a. Click the Monitor tab and navigate to Routing >
Route Information.
b. Select inet.0 from the Route Table list and then click
Generate Report.
c. Save the report on your local disk.
5. Contact Dell customer support at www.support.dell.com.

Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide 19
3 Performing Advanced Network Configuration
This chapter provides the security zone and policies configuration instructions for connecting your Dell PowerConnect J-Series
J-SRX100S/SU Services Gateway.
Section 3 Contents
3.1 Zones and Interfaces Overview......................................................20
3.2 Creating a New Security Zone and Adding an Interface to the New Zone..................20
3.3 Configuring Security Policies .......................................................22
3.4 Enabling Remote Access to the Dell PowerConnect J-Series J-SRX100S/SU Services
Gateway ............................................................................23
3.5 Enabling System Services ..........................................................23
3.6 Allowing Host Inbound Traffic ......................................................24
3.7 Applying the Security Policy Configuration ...........................................24

20 Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
3.1 Zones and Interfaces Overview
Zones split a network infrastructure into logical areas, each with
its own set of usage rules, security services, and policies. Most
networks include multiple definitions of zones, including those
for trusted, untrusted, public, encrypted, and wireless traffic. The
Dell PowerConnect J-Series J-SRX100S/SU Services Gateway
comes preconfigured with basic zones, such as:
• Untrust zone—Zone through which you connect to the
Internet.
• Trust zone—Zone that contains all the trusted local network
resources.
The security features and settings that zones carry are enforced
by binding one or more physical interfaces (fe-0/0/1 through
fe-0/0/7) on services gateway to a zone.
3.2 Creating a New Security Zone and Adding an
Interface to the New Zone
This example shows how to create a new zone, DMZ, and assign
interface fe-0/0/2 to it. This example also shows how to make
fe-0/0/2 an L3 interface and assign an IP address to it.
To create and assign an interface port to the DMZ zone:
1. Click the Configure tab at the top of the page, navigate to
Security > Zones/Screens, and then click Add.
2. Enter the Zone name as DMZ and select the zone type as
security.
3. In the Interfaces in this zone field, move fe-0/0/2 from the
Available list to the Selected list.