Juniper SRX550 User manual

Quick Start Guide
SRX550 High Memory Services Gateway
IN THIS GUIDE
SRX550 High Memory Services Gateway Overview | 1
SRX550 High Memory Front Panel and Rear Panel | 2
Factory-Default Settings | 3
Install the Device in a Rack | 5
Connect the Grounding Cable | 6
Power On the Device | 8
Configure Root Authentication | 10
Plug and Play | 11
Configure Using J-Web | 12
Next Steps | 13
Reference | 14
SRX550 High Memory Services Gateway Overview
The SRX550 High Memory Services Gateway is a large branch office gateway that combines security, routing, switching,
and WAN interfaces with next-generation firewall and advanced threat mitigation capabilities for cost-effective, secure
connectivity across distributed enterprise locations. The services gateway simplifies network complexity, protects and
prioritizes network resources, and improves user and application experience.
The SRX550 High Memory Services Gateway comes with 4 GB of DRAM memory and 8 GB of flash memory.
Package Contents
The SRX550 High Memory Services Gateway is shipped with the following parts:

•RJ-45 cable with DB-9 adapter
•AC or DC power supply
•Power cable (for AC power supply only)
•USB cable
•Mounting brackets and screws
•Documentation Roadmap and Product Warranty
•End User License Agreement
Register the Product
Register product serial numbers on the Juniper Networks website and update the installation base data if there is any
addition or change to the installation base or if the installation base is moved. Juniper Networks will not be held accountable
for not meeting the hardware replacement service-level agreement for products that do not have registered serial numbers
or accurate installation base data.
Register your product at https://tools.juniper.net/svcreg/SRegSerialNum.jsp.
Update your installation base at https://www.juniper.net/customers/csc/management/updateinstallbase.jsp.
SRX550 High Memory Front Panel and Rear Panel
Figure 1: Front Panel Components
2

Figure 2: Rear Panel Components
g007818
Power supply
slot 1
Power supply
slot 0 ACE slot
Grounding point
Air filter cover
ESD pointStorage slot
NOTE: Check the parts in the shipment against the items on the packing list. If anything is missing or damaged,
contact your Juniper Networks customer service representative.
Specifications
SRX550 HMSpecification
3.5 in. x 17.5 in. x 18.2 in.
(8.89 cm x 44.45 cm x 46.23 cm)
Dimensions (D x W x H)
21.96 lb (9.96 kg)Chassis weight
85 WAverage power consumption
238 BTU/hrAverage heat dissipation
5% to 90%, noncondensingRelative humidity
Factory-Default Settings
The SRX550 High Memory device is shipped with the following factory-default settings:
Table 1: Security Policies
Policy ActionDestination ZoneSource Zone
permittrusttrust
permituntrusttrust
3

Table 2: NAT Rules
Policy ActionDestination ZoneSource Zone
Source NAT to untrust zone interfaceuntrusttrust
Table 3: Ethernet Interfaces
IP AddressDHCP StateSecurity ZoneInterfacePort Label
UnassignedClientuntrustge-0/0/0 and ge-0/0/90/0 and 0/9
192.168.1.1/24Servertrustge-0/0/10/1
192.168.2.1/24Servertrustge-0/0/20/2
192.168.3.1/24Servertrustge-0/0/30/3
192.168.4.1/24Servertrustge-0/0/40/4
192.168.5.1/24Servertrustge-0/0/50/5
Table 4: LTE Interfaces
IP AddressSecurity ZoneInterface
N/AN/Acl-1/0/0
ISP assigned*untrustdl0 (logical)
Only if the LTE Mini-PIM is present
The SRX550 High Memory device is shipped with the following services and protocols enabled by default:
Table 5: Services, Protocols, and Startup Mode
Device Startup ModeProtocolsServices
SwitchingRSTP (all interfaces)SSH
HTTPS
NETCONF over SSH
To provide secure traffic, a basic set of screens are configured on the untrust zone.
4

Install the Device in a Rack
Before you begin the installation, review General Safety Guidelines and Warnings. Make sure you have someone available
to help you do the installation. You will need to provide your own rack mount screws and a number two Phillips (+)
screwdriver.
1. Wrap and fasten one end of the electrostatic discharge (ESD) grounding strap around your bare wrist, and connect the
other end to a site ESD point.
2. Position a mounting bracket on each side of the chassis. Use a number two Phillips (+) screwdriver to install the screws
that secure the mounting brackets to the chassis. Use either the front mount position or the center mount position.
Figure 3: Securing the Mounting Brackets (Front-Mount)
Figure 4: Securing the Mounting Brackets (Center-Mount)
3. Lift the device and position it in the rack. Line up the bottom hole in each mounting bracket with a hole in each mounting
rail, making sure the device is level.
4. While you are holding the device in place, have a second person insert and tighten the rack mount screws to secure
the mounting brackets to the rack. Make sure to tighten the screws in the two bottom holes first and then tighten the
screws in the two top holes next.
5

Figure 5: Securing the Chassis to the Rack
g009064
5. Check that the mounting brackets on each side of the rack are lined up with each other.
Connect the Grounding Cable
1. Attach an ESD strap to an ESD point and place the other end of the strap around your bare wrist.
2. Connect the grounding cable to a proper earth ground. Place the grounding cable lug over the grounding point on the
upper rear of the chassis.
NOTE: The device should be permanently connected to ground during normal operation. A licensed electrician
must attach a cable lug to the grounding cable. A cable with an incorrectly attached lug can damage the
device.
3. Secure the grounding cable lug to the grounding point with the screws.
6

Figure 6: Connecting the Grounding Cable
7

Power On the Device
NOTE: Before connecting the device to the power supply, attach an ESD strap to an ESD point and place the
other end of the strap around your bare wrist.
1. If you are using the AC model, perform the following steps:
a. Connect the power supply adapter to the power supply point on the device and to a power source. We recommend
using a surge protector. You must allow the device between five and seven minutes to boot after you power it on.
Figure 7: Connecting the Power Cable
b. Secure the power cord to the cable tie holder using a tie-wrap.
2. If you are using the DC model, perform the following steps:
WARNING: Before performing the following procedure, ensure that there is no power in the DC
circuit. To ensure that all power is cut off, locate the circuit breaker on the panel board that services
the DC circuit, switch the circuit breaker to the OFF (0) position, and tape the switch handle of the
circuit breaker in the OFF position.
a. Ensure that the voltage across the DC power source cable leads is 0 V and that the cable leads do not become
active while you are connecting DC power.
b. Verify that the DC power cables are correctly labeled before making connections to the power supply. In a typical
power distribution scheme where the return is connected to chassis ground at the battery plant, you can use a
multimeter to verify the resistance of the -48V and RTN DC cables to chassis ground:
•The cable with very high resistance (indicating an open circuit) to chassis ground will be connected to the V-
(input) DC power input terminal.
8

•The cable with very low resistance (indicating a closed circuit) to chassis ground will be connected to the V+
(return) DC power input terminal.
c. Remove the clear plastic cover from the terminal studs on the faceplate.
d. Remove the screws on the terminals by using a Phillips (+) screwdriver, number 2.
e. Secure each positive (+) DC source power cable lug to a RTN (return) terminal. Secure each negative (–) DC source
power cable lug to a -48V (input) terminal.
f. Replace the clear plastic cover over the terminal studs on the faceplate.
g. Remove the tape from the switch handle of the circuit breaker on the panel board that services the DC circuit and
switch the circuit breaker to the ON (|) position.
3. Turn on the power to the AC power receptacle.
4. Note the following LED indications. Wait until the STATUS LED is solid green before proceeding to the next step.
Table 6: LED States
StateLED
•Solid green (receiving power).POWER
•Solid green (operating normally).STATUS
•Amber (operating normally–the LED might glow amber if a rescue configuration is
not set. This is not a panic condition).
ALARM
•Off (Mini-PIM not present or not detected).
•Solid green (Mini-PIM is operating normally).
•Red (Mini-PIM hardware failure or counterfeit check failed).
MPIM-1 and MPIM-2
•Off (HA not enabled).
•Solid green (all HA links are available).
HA
•Solid green (redundant power supply is operating normally).RPS
The ACE LED is not functional.ACE
•Solid green (the services gateway is transferring data to or from the optional storage
device).
STORAGE
9

Configure Root Authentication
To configure root authentication:
1. Connect any of the network ports numbered 0/1 through 0/5 on the services gateway to the Ethernet port on the
management device, using an RJ-45 cable.
Figure 8: Connecting the Management Device
2. Ensure that the management device acquires an IP address. The IP address should be on the corresponding IP subnet
for the interface you connected to in step 1. The device functions as a DHCP server and will assign an IP address to
the management device.
For example, if you are connected to port 0/1, then the IP address of the management device should be from the
192.168.1.x network. If an IP address is not assigned to the management device, manually configure an IP address.
You can use the ipconfig (or ifconfig for Macintosh or Linux users) command to verify the IP address.
NOTE: Do not assign the 192.168.1.1 IP address to the management device, as this IP address is assigned
to the device.
Refer to Table 3 for information on the subnet for each interface.
3. Open a browser and type https://192.168.1.1 (if connected to port 0/1). For ports other than 0/1, access the services
gateway using the URL https://192.168.x.1, where x is the port number. Refer to the Interfaces table on page 2.
The J-Web Setup wizard opens on your screen.
4. Click Skip in the upper-right corner of the Setup wizard.
5. Set a root authentication password and click OK.
10

The J-Web login page appears.
6. Log in using the root authentication password.
The J-Web Setup application displays.
Plug and Play
The SRX550 HM already has factory-default settings configured to make it a plug and play device. So all you have to do
to get the SRX550 HM up and running is connect it to your LAN and WAN networks.
1. Connect the WAN network to port 0/0 to obtain a dynamic IP address.
2. Connect the LAN network to any of the ports from 0/1 through 0/5.
3. Check to see if the SRX550 HM is connected to the Internet. Go to http://www.juniper.net. If the page does not load,
check the Internet connection.
After you complete these steps, you can start using the SRX550 HM on your network right away. You can go back and
customize settings at anytime. The J-Web Setup wizard is always available to you.
11

Configure Using J-Web
You can modify the configuration using J-Web. Have the following information ready before you start the configuration
process:
•Hostname
•Root authentication password
•IP address for the NTP server
•IP address for the DNS server
•IP address for the management interface
1. In the J-Web application, select Configure > Setup Wizard. The Setup wizard opens on your screen.
Figure 9: Setup Wizard Page
2. Select Standard.
3. Configure the device and users:
a. Enter the hostname.
b. (Optional) Enable root access using SSH.
c. Enter the root authentication password.
d. (Optional) Add user accounts.
e. Click Next.
4. Set the time and configure the DNS server:
12

a. Set the time manually or configure an NTP server.
b. Select the time zone from the drop-down box.
c. Type the IP address for the DNS server.
d. Click Next.
5. Configure the management interface:
a. Select the management port.
b. Type the IP address for the management interface and the static route if it is needed to reach the device via the
management interface.
c. Click Next.
6. Configure zones and associate interfaces to the zones. You can use the default settings and click Next.
7. Set up additional services and security policies, or just click Finish and set it up later.
The Setup Wizard displays a summary of your configuration settings.
8. You can edit any setting or click OK.
Once you click OK, the Setup Wizard applies your configuration.
NOTE: You might lose connectivity to the device if you changed the IP address of the port to which the
laptop is connected. If you lose connectivity, open a new browser window and type https://<new IP address>
to access J-Web again.
9. Click Close to end the Setup Wizard.
The J-Web login screen automatically displays on your screen. You can log in with the root authentication password.
Next Steps
For information on configuring features on your services gateway, refer to the following:
•Junos OS User Guides
•Getting Started Knowledge Base Article
13

Reference
•Technical Support
•SRX550 High Memory Services Gateway Hardware Guide
•Supported Transceivers
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the
United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the
property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper
Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Copyright © 2020
Juniper Networks, Inc. All rights reserved. Rev. 01, July 2020.
14