Juniper Srx650 User manual

Getting Started Guide

SRX650 Services Gateway

PART 1 - CONNECTING AND CONFIGURING THE DEVICE

Use the instructions below to connect and set up the SRX650 Services Gateway to protect your network. Refer to the

LEDs on the front and back panels of the device to help you determine the status of the device.

Overview:

The SRX650 Services Gateway is a security device that requires these

basic configuration settings to function properly.

•Interfaces must be assigned IP addresses.

•Interfaces must be bound to zones.

•Policies must be configured between zones to permit/deny traffic.

•Source NAT rules must be set.

Factory-default settings:

Security policies:

NAT rule:

Step 1

Connect the power cable to the device and a power source. We

recommend using a surge protector. Note the following indications:

•POWER LEDs (solid green) on front and back panels: The device

is receiving power.

•STATUS LED (solid green) on back panel: The device is

operating normally.

•ALARM LED (amber) on front panel: The device is operating

normally in the absence of rescue configuration. This is not a panic

condition.

Note: A solid red ALARM LED indicates a major problem exists on the

services gateway.

Important: You must allow the services gateway between five and seven

minutes to boot up after you have powered it on. Please wait until the

STATUS LED is solid green before proceeding to the next step.

Step 2

Connect the management device to the services gateway using either of

the following methods:

•Connect an Ethernet cable from the ge-0/0/1 port to the Ethernet

port on the management device (workstation or laptop). We

recommend this connection method.

If you are using this method, proceed with Step 3.

Interface Security Zone DHCP State IP Address

ge-0/0/0 untrust client 0.0.0.0

ge-0/0/1 trust server 192.168.1.1/24

ge-0/0/2 trust server 192.168.2.1/24

ge-0/0/3 trust server 192.168.3.1/24

Source Zone Destination Zone Policy Action

trust untrust permit

trust trust permit

untrust trust deny

Source Zone Destination Zone Policy Action

trust untrust source NAT to untrust zone interface

Use the instructions in this guide to help you connect the SRX650 Services Gateway to your network. For details, see the

SRX650 Services Gateway Hardware Guide at http://www.juniper.net/techpubs/a065.html.

Front Panel

Back Panel

1. Mounting brackets

2. ALARM LED

3. FAN LED

4. SRE/ACE LED 1.0

5. ESD outlet

6. 10/100/1000 Ethernet ports

7. GPIM/XPIM slots

8. POWER LED

9. HA SYS LED

10. SRE/ACE LED 0 (Applies to SRE modules only)

11. SRE/ACE LED 1.1

12. Power button

g032700-gsg

8910 11

1. Power supply slots

2. Multi-use processing

slot

3. Services and Routing

Engine (SRE) slot 0

(shown with SRE module

installed)

4. Fan tray

5. Air filter (behind fan tray)

6. Reset Config

7. SRE LEDs

8. AUX port

9. Console port

10. External CompactFlash

slot

11. USB ports (2 each)

DC OK AC OK

SRE 6

Services and Routing Engine 6

OFFLINE RESET

CONFIG

ALARM POWER STATUS

AUX CONSOLE

SRE

CF ACT

COMPACT FLASH

USB 0 USB 1

g032703

1345

78 9 11

610

•Connect an RJ-45 cable from the console port to the DB-9 adapter,

which then connects to the serial port on the management device.

(Serial port settings: 9600 8-N-1-N)

If you are using this method to connect, proceed with the CLI

configuration instructions available in the Quickstart Guide for

Branch SRX Series Services Gateways at

http://www.juniper.net/us/en/local/pdf/app-notes/3500153-en.pdf.

Step 3

After connecting the management device to the services gateway, the

DHCP server process on the services gateway will assign an IP address

automatically to the management device.

Note: If an IP address is not assigned to the management device,

manually configure an IP address in the 192.168.1.0/24 subnetwork

while the management device is still connected to the ge-0/0/1 port .

Step 4

Access the J-Web interface:

1. Launch a Web browser on the management device.

2. Enter http://192.168.1.1 in the URL address field.

3. Specify the default username as root. Do not enter any value in the

Password field.

4. Click Log In. The J-Web Initial Setup is displayed.

Step 5

1. Configure the basic settings, such as Host Name, Domain Name,

Root Password, and IP Address, for your services gateway.

Important: Ensure that you have configured the IP address, root

authentication, and default gateway before you apply the

configuration.

2. Click Apply to apply the configuration.

Note: All network and management access settings are optional.

Step 6

Configure an interface as follows:

1. In the J-Web interface, click the Configuration tab at the top and

click Interfaces on the side bar. The Interfaces page is displayed.

2. Under the Interface Name column, click on the interface you want

to configure.

3. Under Logical Interfaces, click Add.

4. Under IPv4 Addresses and Prefixes, click Add.

5. In the IPv4 Address and Prefix field, enter an IP address and a

subnet mask.

6. Click OK. The configured IP address is included in the Address

Prefix column.

For additional configuration information, see the Quickstart Guide for

Branch SRX Series Services Gateways at

http://www.juniper.net/us/en/local/pdf/app-notes/3500153-en.pdf.

For detailed software configuration information, see the software

documentation available at

http://www.juniper.net/techpubs/software/junos-srx/index.html.

PART 2 - POWERING OFF THE DEVICE

To shut down the operating system on the Services and Routing Engine (SRE), perform a graceful shutdown by pressing and

releasing the Power button. The device begins gracefully shutting down the operating system on the SRE.

To rescue the configuration or return the services gateway to its factory default configuration, press the Reset Config button.

Note: You can reboot or halt the system in the J-Web interface by selecting Manage > Reboot.

Networks, Inc. in the United States and other countries. JUNOSe is a trademark of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks in this

document are the property of Juniper Networks or their respective owners. All specifications are subject to change without notice. Juniper Networks assumes no responsibility for any inaccuracies in this

document or for any obligation to update information in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

P/N 530-032522 Rev. 01

Other manuals for SRX650

Other Juniper Gateway manuals