Juniper SRX320 User manual

Quick Start Guide
SRX320 Services Gateway
IN THIS GUIDE
SRX320 Services Gateway Overview | 1
SRX320 Front Panel and Rear Panel | 2
Factory-Default Settings | 3
Install the Device in a Rack | 4
Connect the Grounding Cable (Optional) | 7
Power On the Device | 8
Configure Root Authentication | 9
Plug and Play | 11
Customize the Configuration | 11
Next Steps | 12
Reference | 12
SRX320 Services Gateway Overview
The SRX320 Services Gateway consolidates security, routing, switching, and WAN interfaces for small distributed
enterprises. With advanced threat mitigation capabilities, the services gateway provides cost-effective and secure
connectivity across distributed enterprises.
With a desktop form-factor chassis, the SRX320 Services Gateway has six 1-Gigabit Ethernet ports, two 1-Gigabit Ethernet
SFP ports, 4 GB of DRAM memory, and 8 GB of flash memory. The SRX320 Services Gateway is available with or without
Power over Ethernet (PoE) capability. In the PoE model, the six Ethernet ports are PoE capable.
Package Contents
The SRX320 Services Gateway is shipped with the following parts:

•RJ-45 cable with DB-9 adapter
•USB cable
•Power supply adapter
•Power cable
•Documentation Roadmap and Product Warranty
•End User License Agreement
Register the Product
Register product serial numbers on the Juniper Networks website and update the installation base data if there is any
addition or change to the installation base or if the installation base is moved. Juniper Networks will not be held accountable
for not meeting the hardware replacement service-level agreement for products that do not have registered serial numbers
or accurate installation base data.
Register your product at https://tools.juniper.net/svcreg/SRegSerialNum.jsp.
Update your installation base at https://www.juniper.net/customers/csc/management/updateinstallbase.jsp.
SRX320 Front Panel and Rear Panel
Figure 1: Front Panel Components of SRX320
2

Figure 2: Rear Panel Components of SRX320
NOTE: Check the parts in the shipment against the items on the packing list. If anything is missing or damaged,
contact your Juniper Networks customer service representative.
Specifications
SRX320-PoESRX320Specification
7.52 in. x 11.81 in. x 1.73 in.
(19.10 cm x 29.99 cm x 4.39 cm)
7.52 in. x 11.81 in. x 1.73 in.
(19.10 cm x 29.99 cm x 4.39 cm)
Dimensions (D x W x H)
3.4 lb (1.54 kg)3.28 lb (1.49 kg)Chassis weight
221 W46 WAverage power consumption
755 BTU/hr157 BTU/hrAverage heat dissipation
5% to 90%, noncondensing5% to 90%, noncondensingRelative humidity
Factory-Default Settings
The SRX320 device is shipped with the following factory-default settings:
Table 1: Security Policies
Policy ActionDestination ZoneSource Zone
permittrusttrust
permituntrusttrust
3

Table 2: NAT Rules
Policy ActionDestination ZoneSource Zone
Source NAT to untrust zone interfaceuntrusttrust
Table 3: Ethernet Interfaces
IP AddressDHCP StateSecurity ZoneInterfacePort Label
UnassignedClientuntrustge-0/0/0 and ge-0/0/70/0 and 0/7
192.168.1.1/24ServertrustVLAN Interface irb.0 (ge-0/0/1
to ge-0/0/6)
0/1 to 0/6
Table 4: LTE Interfaces
IP AddressSecurity ZoneInterface
N/AN/Acl-1/0/0
ISP assigned*untrustdl0 (logical)
*Only if the LTE Mini-PIM is present
The SRX320 device is shipped with the following services and protocols enabled by default:
Table 5: Services, Protocols, and Startup Mode
Device Startup ModeProtocolsServices
SwitchingRSTP (all interfaces)SSH
HTTPS
NETCONF over SSH
To provide secure traffic, a basic set of screens are configured on the untrust zone.
Install the Device in a Rack
Before you begin the installation, review General Safety Guidelines and Warnings.
You can install the SRX320 on a desktop, on a wall, or in a rack. This procedure shows you how to install it in a rack. You’ll
need to order a rack mount kit that is appropriate for your installation (see Table 6).
4

NOTE: The mounting kits are not shipped with the device and must be ordered separately.
Table 6: Rack Mount Kits for the SRX320
Rack Mount Kit Without Power
Supply Adapter Tray
Rack Mount Kit With Power Supply
Adapter TrayModel
SRX320-RMK1
Includes:
•Eight flat-head M3x5mm Phillips
mounting screws
•Two mounting brackets
SRX320-RMK0
Includes:
•Twelve flat-head M3x5mm Phillips
mounting screws
•One mounting bracket
•One power supply adapter tray and two
adapter stopper brackets
SRX320 (non-PoE
model)
SRX320-P-RMK1
Includes:
•Eight flat-head M3x5mm Phillips
mounting screws
•Two mounting brackets
SRX320-P-RMK0
Includes:
•Thirteen flat-head M3x5mm Phillips
mounting screws
•One mounting bracket
•One power supply adapter tray and three
adapter stopper brackets
SRX320 (PoE model)
5

Make sure you have someone available to help you do the installation. You will need to provide your own rack mount
screws and a number two Phillips (+) screwdriver.
1. Position a mounting bracket on each side of the chassis. Use a number 2 Phillips (+) screwdriver to install the screws
that secure the mounting brackets and power supply adapter tray to the chassis.
Figure 3: Securing the Mounting Brackets and Power Supply Adapter Tray (75 W Power Supply Adapter)
Figure 4: Securing the Mounting Brackets and Power Supply Adapter Tray (280 W Power Supply Adapter)
2. Place the power supply adapter in the tray.
3. Lift the SRX320 and position it in the rack. Line up the bottom hole in the mounting brackets with a hole in each rack
rail, making sure the SRX320 is level.
4. While you’re holding the SRX320 in place, have a second person insert and tighten the rack mount screws to secure
the adapter tray and mounting brackets to the mounting rails. Make sure to tighten the screws in the two bottom holes
first and then tighten the screws in the two top holes next.
6

Figure 5: Securing the Chassis to the Rack
g000951
5. Check that the mounting brackets on each side of the rack are lined up with each other.
The SRX320 Services Gateway can also be mounted on a desk or a wall. For details, see the SRX320 Services Gateway
Hardware Guide.
Connect the Grounding Cable (Optional)
1. Attach an ESD strap to an ESD point and place the other end of the strap around your bare wrist.
2. Connect the grounding cable to a proper earth ground.
3. Place the grounding cable lug over the grounding point on the rear of the chassis.
NOTE: A licensed electrician must attach a cable lug to the grounding cable. A cable with an incorrectly
attached lug can damage the device.
4. Secure the grounding cable lug to the grounding point with the screw.
7

Figure 6: Connecting the Grounding Cable
g000756
Grounding point
on the chassis
Grounding lug
Grounding
screw
Power On the Device
NOTE: Before connecting the device to the power supply, attach an ESD strap to an ESD point and place the
other end of the strap around your bare wrist.
1. Plug the DC connector end of the power cable into the power connector on the rear of the device.
Figure 7: Connecting the Power Cable
g000757
2. Plug the AC adapter end of the power cable into an AC power outlet.
3. Turn on the power to the AC power receptacle.
4. Note the following LED indications. Wait until the STAT LED is solid green before proceeding to the next step.
8

Table 7: LED States
StateLED
•Solid amber (noncritical alarm).
•Solid red (critical alarm).
•Off (no alarms).
ALARM
•Solid green (operating normally).
•Solid red (error detected).
STAT
•Solid green (receiving power).
•Solid red (power failure).
•Off (no power).
PWR
•Solid green (all HA links are available).
•Solid amber (some HA links are unavailable).
•Solid red (HA links are not functional).
•Off (HA is disabled).
HA
•Green (mini-PIM is present and detected by the device).
•Off (mini-PIM is not present or not detected by the device).
mPIM1, mPIM2
Configure Root Authentication
To configure the device by using J-Web:
1. Connect one end of the Ethernet cable to any of the network ports numbered 0/1 through 0/6 on the device.
NOTE: The ge-0/0/0 and ge-0/0/7 interfaces (ports 0/0 and 0/7) are WAN interfaces. Do not use these
ports for the initial configuration procedure.
2. Connect the other end of the Ethernet cable to the management device.
9

Figure 8: Connect the SRX320 to a Management Device
g101130
Ethernet port
Ethernet port
RJ-45 cable
The SRX320 functions as a DHCP server and automatically assigns an IP address to the laptop.
3. Ensure that the management device acquires an IP address on the 192.168.1.0/24 network from the device.
If an IP address is not assigned to the management device, manually configure an IP address in the 192.168.1.0/24
network.
NOTE: Do not assign the 192.168.1.1 IP address to the management device, as this IP address is assigned
to the SRX320.
4. Open a browser and type https://192.168.1.1. The Phone Home Client screen appears.
5. Click Skip to J-Web.
NOTE: To configure the device using zero-touch provisioning (ZTP), see Configure the Device Using ZTP
with Juniper Networks Network Service Controller.
6. Set a root authentication password in the Skip to J-Web screen and click Submit.
10

The J-Web login page appears.
Plug and Play
The SRX320 already has factory-default settings configured to make it a plug and play device. So all you have to do to
get the SRX320 up and running is connect it to your LAN and WAN networks.
1. Connect the WAN network to port 0/0 to obtain a dynamic IP address.
2. Connect the LAN network to any of the ports from 0/1 through 0/6.
3. Check to see if the SRX320 is connected to the Internet. Go to http://www.juniper.net. If the page does not load,
check the Internet connection.
After you complete these steps, you can start using the SRX320 on your network right away.
Customize the Configuration
You can continue to customize the settings by logging in to J-Web and selecting the configuration mode that’s right for
you. You can then follow the screens as they appear in the Setup wizard.
NOTE: To customize the configuration in Junos OS Release 15.1X49-D170, see Customize the Configuration
for Junos OS Release 15.1X49-D170.
•Standard—Configure basic security settings for the SRX320.
11

•Cluster (HA)—Set up the SRX320 in chassis cluster mode.
•Passive—Set up the SRX320 in Tap mode. Tap mode enables the SRX320 to passively monitor traffic flows across a
network.
Next Steps
For information on configuring features on your services gateway, refer to the following:
•Junos OS User Guides
•Getting Started Knowledge Base Article
Reference
•Technical Support
•SRX320 Services Gateway Hardware Guide
•Supported Transceivers
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the
United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the
property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper
Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Copyright © 2020
Juniper Networks, Inc. All rights reserved. Rev. 02, September 2020.
12