Juniper SRX550 User manual

1
The SRX550 High Memory Services Gateway is a large branch oce
gateway that combines security, routing, switching, and WAN interfaces
with next-generation firewall and advanced threat mitigation capabilities
for cost-eective, secure connectivity across distributed enterprise
locations. The services gateway simplifies network complexity, protects and
prioritizes network resources, and improves user and application experience.
The SRX550 High Memory Services Gateway comes with 4 GB of DRAM
memory and 8 GB of flash memory.
How to Set Up Your SRX550 High Memory Services Gateway
Package Contents
Back Panel
Front Panel
Specification Value
Dimensions (H x W x D) 3.5 in. x 17.5 in. x 18.2 in.
Chassis weight 21.96 lb
Average power consumption 85 W
Average heat dissipation 238 BTU/hr
Relative humidity 5% to 90%, noncondensing
Noise level 51.8 dB per ISO 7779 standard
g009055
USB cable
SRX550
AC power supply
Mounting br
ackets
Warranty and Registration
Information
DB9 adapter
Screws
• End-User License Agreement
• Safety Guide
• Quick Start Guide
Power cableRJ45 cable
g00
7818
Power supply slotsACE slot
Grounding point
Air filter cover
ESD pointStorage slot
g009056
LEDs
Serial
console
port
USB
console
port
AUX
port
ES
D
point
USB 0 and
USB 1 ports
Power
button
Reset Config
button
Gigabit
Ethernet ports
SFP
Ethernet ports
Mini-PIM
slots
GPIM
slots
Mounting
bracket

How to Set Up Your SRX550 High Memory Services Gateway 2
Gather Configuration Information
Gather information about your network and the configuration settings that you
will use to configure the device.
Required
Device name
Root authentication
Optional
NTP server name or IP address
Licenses
Internet zone
Static IP (provided by ISP)
Portnumber
DMZ
Network IP address
Port number
Internal zone
Name of the zone
Network IP address
Port number
DHCP server
Security policies
Remote client IP pool range
Destination NAT
Internal zones for which source NAT has been added
IP address or hostname
Factory-Default Settings
Security Policies
Source Zone Destination Zone Policy Action
trust untrust permit
trust trust permit
untrust trust deny
NAT Rules
Source Zone Destination Zone Policy Action
trust untrust Source NAT to untrust zone
interface
Interfaces
Port Label Interface Security Zone DHCP State IP Address
0/0 ge-0/0/0 untrust Client Dynamically
assigned
0/1 ge-0/0/1 trust Server 192.168.1.1/24
0/2 ge-0/0/2 trust Server 192.168.2.1/24
0/3 ge-0/0/3 trust Server 192.168.3.1/24
0/4 ge-0/0/4 trust Server 192.168.4.1/24
0/5 ge-0/0/5 trust Server 192.168.5.1/24
Initial Configuration Process
g007680
Connect
the Grounding
Cable
Verify the
Settings
Connect the
Management Device
to the Ethernet Port
Configure
Root
Authentication
Log in
to the CLI
Connect the
Management Device
to the Console Port
Power On
the Device

How to Set Up Your SRX550 High Memory Services Gateway 3
Connect the Grounding Cable
1. Connect the grounding cable to a proper earth ground.
2. Place the grounding cable lug over the grounding point on the upper rear of
the chassis.
NOTE: A licensed electrician must attach a cable lug to the grounding
cable. A cable with an incorrectly attached lug can damage the device.
3. Secure the grounding cable lug to the grounding point with the screws. Apply
between 6 in.-lb (0.67 Nm) and 8 in.-lb (0.9 Nm) of torque to the screws.
NOTE: The device should be permanently connected to ground during
normal operation.
100-240V~10A MAX
50~60 HZ
DC OK AC OK
Grounding screw
(M3 screw)
Grounding
lug
Grounding
point
g007820
Power On the Device
NOTE: Before connecting the device to the power supply, attach an ESD
strap to an ESD point and place the other end of the strap around your
bare wrist.
1. Connect the power supply adapter to the power supply point on the device
and to a power source. We recommend using a surge protector. You must
allow the device between five and seven minutes to boot after you power it on.
g03410
9
2. Secure the power cord to the cable tie holder using a tie-wrap.

How to Set Up Your SRX550 High Memory Services Gateway 4
3. Note the following indications. Wait until the STATUS LED is solid green
before proceeding to the next step.
g00905
7
LED State
Power •Solid green (receiving power).
STATU S •Solid green (operating normally).
ALARM •Amber (operating normally–the LED might glow amber if a
rescue configuration is not set. This is not a panic condition).
MPIM-1 and MPIM-2 LEDs •O (Mini-PIM not present or not detected).
•Solid green (Mini-PIM is operating normally).
•Red (Mini-PIM hardware failure or counterfeit check failed).
HA •O (HA not enabled).
•Solid green (all HA links are available).
RPS •Solid green (redundant power supply is operating normally).
ACE •The ACE LED is not functional.
RPS •Solid green (the services gateway is transferring data to or
from the optional storage device).
Connect the Management Device
to the Console Port
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist,
and connect the strap to the ESD point on the chassis.
2. Connect one end of the Ethernet cable to the Console port on your services
gateway.
g009068
Console port
RJ-45 cable
3. Connect the other end of the Ethernet cable to the DB-9 adapter, and then
connect the adapter to the serial port on the management device. Use the
following values to configure the serial port:
Baud rate—9600; Parity—N; Data bits—8; Stop bits—1; Flow control—None
Log In to the CLI
1. Log in as the root user. Do not enter any password.
2. Start the CLI and enter configuration mode.
root@%cli
root>congure
root#

How to Set Up Your SRX550 High Memory Services Gateway 5
Configure Root Authentication
1. Set the root authentication password by entering a cleartext password, an
encrypted password, or an SSH public key string (DSA or RSA).
root# set system root-authentication plain-text-password
New password: password
Retype new password: password
2. Commit the configuration to activate it on the device.
root# commit
Connect the Management Device to the Ethernet Port
1. Connect any of the network ports numbered 0/1 through 0/5 to the Ethernet
port on the management device, using an RJ-45 cable.
2. Ensure that the management device acquires an IP address. The IP address
should be on the corresponding IP subnet for the interface you connected to
in step 1. The device functions as a DHCP server and will assign an IP address
to the management device.
For example, if you are connected to port 0/1, then the IP address of the
management device should be from the 192.168.1.x network. If an IP address
is not assigned to the management device, manually configure an IP address.
Do not assign the 192.168.1.1 IP address to the management device, as this IP
address is assigned to the device. You can use the ipconfig (or ifconfig for
Macintosh or Linux users) command to verify the IP address.
Refer to the Interfaces table on page 2 for information on the subnet for each
interface.
g00906
9
Ethernet port
RJ-45 cable Ethernet port
Verify the Settings
Launch a Web browser from the management device and access the services
gateway using the URL http://192.168.1.1 (if connected to port 0/1). For ports
other than 0/1, access the services gateway using the URL http://192.168.x.1,
where x is the port number. Refer to the Interfaces table on page 2. The J-Web
login page is displayed. This indicates that you have successfully completed the
initial configuration and that your SRX550 High Memory Services Gateway is
ready for use.
If the page does not load, perform the following checks to see if you can identify
the problem:
•Check if the cable connecting the ISP-supplied device to the SRX Series
device is firmly seated.
•Use the CLI ping command to verify that the SRX550 High Memory Services
Gateway can be accessed from the management device.
•Check if the Ethernet port has acquired the IP address on the correct
sub-network.
•Clear the browser cache on the management device.
After you complete these steps, the device can pass trac from any trust port to
the untrust port. You can connect other devices to the SRX Series device.
NOTE: With this step, you have successfully completed the initial
configuration, and your SRX550 High Memory Services Gateway is ready
for use. You can proceed with customizing the configuration according to
your requirements.
Power O the Device
To power o the device, press the Power button on the front of the device and
hold it for 10 seconds. To remove power completely from the device, unplug the
AC power cord or DC power supply cable. After powering o a power supply,
wait at least 60 seconds before turning it back on.
NOTE: Graceful shutdown is not supported on the SRX550 High Memory
Services Gateway.

Copyright © 2016, Juniper Networks, Inc. All rights reserved.
Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper
Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks
reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Part Number: 530-066672 Revision 01, February 2016.
Reset the Configuration
Use the RESET CONFIG button to restore the device to the factory-default
configuration or to a rescue configuration. To press the RESET CONFIG button,
insert a small probe (such as a straightened paper clip) into the pinhole on the
front panel.
Pressing and quickly releasing the RESET CONFIG button loads and commits
the rescue configuration. The rescue configuration is a previously committed,
valid configuration set through J-Web or the CLI. The STATUS LED is solid amber
during this time.
Pressing and holding the RESET CONFIG button for 15 seconds or more,
until the STATUS LED is solid amber, deletes all configurations (backup
configurations and rescue configuration), and loads and commits the factory
configuration.
NOTE: After a rescue configuration has been set, an amber ALARM LED
indicates a minor alarm, and a solid red ALARM LED indicates a major
problem.
Reference
Junos OS Documentation
http://www.juniper.net/techpubs/en_US/release-independent/junos/
information-products/pathway-pages/srx-series/product/index.html
Technical Support
http://www.juniper.net/support/requesting-support.html
SRX550 High Memory Services Gateway Hardware Guide
http://www.juniper.net/techpubs/en_US/release-independent/junos/
information-products/pathway-pages/srx-series/product/index.html