Juniper SRX4200 Setup guide

1
The SRX4200 Services Gateway is a high-performance, scalable mid-range
services gateway that consolidates security, next-generation firewall, and
advanced threat prevention capabilities to provide secure connectivity. The
services gateway is suited for small to medium enterprises and data centers.
The SRX4200 Services Gateway comes with 64 GB of DDR4 memory and two
240-GB solid-state drives (SSDs) in RAID1 configuration. The SRX4200 Services
Gateway is available in both AC and DC models.
How to Set Up Your SRX4200 Services Gateway
Package Contents
Back Panel
Front Panel
g005227
ALARM OFF
Grounding
point
ESD
point
Fans Power supply slots
Power
switch
Alarm
o
Specification Value
Dimensions (H x W x D) 1.75 in. x 17.48 in. x 25 in.
(4.45 cm x 44.40 cm x 63.50 cm)
Chassis weight 29 lb (13.15 kg)-with two AC power supplies
28.8 lb (13.06 kg)-with two DC power supplies
Average power consumption 200 W
Maximum thermal output 1500 BTU/hour
Relative humidity 5% to 90%, noncondensing
NOTE: The SRX4200 Services Gateway shipment package contains a
packing list. Check the parts in the shipment against the items on the
packing list. If anything is missing or damaged, contact your Juniper
Networks customer service representative.
g005246
LED
s
Management
port
USB 2.0
ports
1G/10G SFP+
HA ports
1G/10G SFP+
ports
Console Reset
buttonport
g005245
SRX4200
Warranty and Registration
Information
DB9-to-RJ-45 cable
Screws
• End User License Agreement
• Safety Guide
• Quick Start Guide
Mounting brackets
AC power cables
RJ-45 cables
Mounting ears

How to Set Up Your SRX4200 Services Gateway 2
Factory-Default Settings
Interfaces
Interface IP Address
fxp0 192.168.1.1/24
Services
Services
SSH
HTTPS
NETCONF over SSH
Initial Configuration Process
g043458
Install Device
in a Rack
Connect
the Grounding
Cable
Configure Root
Authentication
Connect
to the
Console Port
Power On
the Device
Install the Device in a Rack
1. Attach the mounting ears to the front of the chassis, using the screws
provided. Then, attach the fixed brackets to the rear of the device, using the
screws provided.
g005271
NOTE: Ensure that the rear of the device is supported throughout the
process of mounting the device into the rack.
2. Slide the device into the rack, and secure the mounting ears to the rack, using
the screws provided.
g005272
3. Slide the adjustable brackets into the fixed brackets attached to the rear of
the device
g005273
4. Secure the adjustable brackets to the rack, using the screws provided.
g005274

How to Set Up Your SRX4200 Services Gateway 3
Connect the Grounding Cable
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist,
and connect the strap to the ESD point on the chassis.
2. Connect one end of the grounding cable to a proper earth ground, such as the
rack in which the services gateway is mounted.
3. Place the grounding cable lug over the grounding point on the rear of the
chassis.
g005229
Grounding point
on the chassis
Grounding
lug
Grounding
screw
NOTE: The device should be permanently connected to ground during
normal operation. A licensed electrician must attach a cable lug to the
grounding cable. A cable with an incorrectly attached lug can damage
the device.
4. Secure the grounding cable lug to the grounding point with the screw.
Power On the Device
1. If you are using the AC model, perform the following steps:
a. Insert the coupler end of the power cord into the AC power cord inlet on
the AC power supply faceplate. Push the power cord retainer onto the
power cord.
g00523
0
b. Insert the power cord plug into an AC power source outlet.
c. Turn on the power to the AC power receptacle.
d. Repeat steps a through c for the second AC power supply.
e. Verify that the AC and DC LEDs on each power supply are lit green.
2. If you are using the DC model, perform the following steps:
WARNING: Before performing the following procedure, ensure that
there is no power in the DC circuit. To ensure that all power is cut o,
locate the circuit breaker on the panel board that services the DC circuit,
switch the circuit breaker to the OFF (0) position, and tape the switch
handle of the circuit breaker in the OFF position.
a. Ensure that the voltage across the DC power source cable leads is 0 V and
that the cable leads do not become active while you are connecting DC
power.

How to Set Up Your SRX4200 Services Gateway 4
b. Verify that the DC power cables are correctly labeled before making
connections to the power supply. In a typical power distribution scheme
where the return is connected to chassis ground at the battery plant, you
can use a multimeter to verify the resistance of the -48V and RTN DC
cables to chassis ground:
•The cable with very high resistance (indicating an open circuit) to chassis
ground will be connected to the V- (input) DC power input terminal.
•The cable with very low resistance (indicating a closed circuit) to chassis
ground will be connected to the V+ (return) DC power input terminal.
c. Remove the clear plastic cover from the terminal studs on the faceplate.
d. Remove the screws on the terminals by using a Phillips (+) screwdriver,
number 2.
e. Secure each positive (+) DC source power cable lug to a RTN (return)
terminal. Secure each negative (–) DC source power cable lug to a -48V
(input) terminal.
f. Tighten the screws on the power supply terminals until snug using the
screwdriver. Do not overtighten.
g00523
1
g. Replace the clear plastic cover over the terminal studs on the faceplate.
h. Remove the tape from the switch handle of the circuit breaker on the panel
board that services the DC circuit, and switch the circuit breaker to the ON
(|) position.
i. Verify that the IN and OUT LEDs on the power supply are lit green and are
on steadily.
3. Wait until the Status LED on the front panel of the services gateway is solid
green before proceeding to the next step.
g00524
7
Power
St
atus
SSD
Connect to the Console Port
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist,
and connect the strap to the ESD point on the chassis.
2. Plug the RJ-45 end of the DB9-to-RJ-45 cable into the Console port on your
services gateway.
g005248
DB9-to-RJ-45 cable
Console port
Serial port
3. Connect the other end of the cable to the serial port on the management
device. Use the following values to configure the serial port:
Baud rate—9600; Parity—N; Data bits—8; Stop bits—1; Flow control—None.

How to Set Up Your SRX4200 Services Gateway 5
Configure Root Authentication
Before you can use J-Web to configure your device, you must access the CLI to
configure root authentication.
1. Log in to the device as root. When the device is powered on with the factory-
default configuration, you do not need to enter a password.
2. At the (%) prompt, type cli to start the CLI and press Enter. The prompt
changes to an angle bracket (>) when you enter the CLI operational mode.
root%cli
root>
3. At the (>) prompt, type configure and press Enter. The prompt changes from
> to # when you enter configuration mode.
root> congure
Entering conguration mode
[edit]
root#
4. Set the root authentication password by entering a cleartext password, an
encrypted password, or an SSH public key string (DSA or RSA).
root# set system root-authentication plain-text-
password
New password: password
Retype new password: password
5. Configure the route for the management interface (optional, required only if
you do not connect the MGMT port directly to the management device).
root# set routing-options static route <destination
prex> next-hop <gateway>
6. Commit the configuration changes.
root# commit
7. Connect the MGMT port on the device to the Ethernet port on the
management device using an RJ-45 cable.
8. Configure an IP address on the 192.168.1.0/24 subnetwork for the
management device. By default, the management interface is configured with
the 192.168.1.1/24 IP address. If you need to change the IP address, perform
the following steps or else proceed to Step 9.
a. Delete the default management interface IP address.
root# delete interface fxp0 unit 0 family inet
address 192.168.1.1/24
b. Configure a new IP address for the management interface.
root# set interfaces fxp0 unit 0 family inet address
address/prex-length
c. Commit the configuration changes.
root# commit
d. Configure an IP address for the management device. Ensure that the IP
address is on the same subnetwork as the management interface (fxp0).
9. Launch a Web browser from the management device and access the services
gateway using the URL https://192.168.1.1.
If you changed the management interface IP address in Step 8, then use the
URL https://<management IP address> to access the services gateway.
NOTE: As the system-generated certificate is not trusted by default, an
alert is displayed. You can ignore this alert and proceed to access the
services gateway.
The J-Web login page is displayed. This indicates that you have successfully
completed the initial configuration and that your SRX4200 Services Gateway
is ready for use.

Copyright © 2016, Juniper Networks, Inc. All rights reserved.
Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper
Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks
reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Part Number: 530-074092 Rev. 01, December 2016.
10. Log in as root and proceed with configuring the settings based on your
requirements.
Power O the Device
To power o the device, press the Power switch on the rear of the device. After
powering o the device, wait at least 60 seconds before turning it back on.
Reset the Configuration
Pressing and holding the RESET button for 5 seconds or more deletes all
configurations (backup configurations and rescue configuration) on the device,
and loads and commits the factory configuration.
Next Steps
For information on configuring features on your services gateway, refer to the
following:
•Junos OS Documentation/Feature Configuration
http://www.juniper.net/techpubs/en_US/release-independent/junos/
information-products/pathway-pages/srx-series/product/index.html
•Getting Started Knowledge Base Article
https://kb.juniper.net/InfoCenter/index?page=content&id=KB15694
Reference
Technical Support
http://www.juniper.net/support/requesting-support.html
SRX4200 Services Gateway Hardware Guide
http://www.juniper.net/techpubs/en_US/release-independent/junos/
information-products/pathway-pages/hardware/srx4200/index.html
Supported Transceivers
https://pathfinder.juniper.net/hct/product/#prd=SRX4200