Juniper SRX Series User manual

Quick Start
Cloud-Ready SRX Series Firewalls with Mist
IN THIS GUIDE
Step 1: Begin | 1
Step 2: Up and Running | 5
Step 3: Keep Going | 6
Step 1: Begin
IN THIS SECTION
Onboard One SRX Series Firewall Using the Mist AI Mobile App | 2
Onboard One or More SRX Series Firewalls Using a Web Browser | 3
Integrate Your Juniper Support Account With Your Mist Organizaon | 4
This guide walks you through the simple steps to get a new cloud-ready SRX Series rewall up and running in the Mist
cloud. You can onboard one or more rewalls using your computer, or a single rewall using your mobile phone.
NOTE: Before you begin, you must set up your organizaon and sites, and acvate your subscripons. For more
informaon, see Quick Start: Mist.
We show you how to complete two dierent ZTP-based onboarding methods:

• To onboard a single rewall using your mobile phone, see "Onboard One SRX Series Firewall Using the Mist AI
Mobile App" on page 2 .
• To onboard one or more rewalls using your computer, see "Onboard One or More SRX Series Firewalls Using a Web
Browser" on page 3 .
NOTE: The procedures in this quick start guide are intended for new (greeneld) SRX Series rewalls.
• To onboard (adopt) exisng, in-service (browneld), SRX Series rewalls into Mist, see Adopt a WAN Edge
from Your Juniper Installed Base.
• To onboard non-cloud-ready SRX Series rewalls, use the procedure in the applicable quick start guide in the
Quick Start Portal.
• To provision an SRX Series rewall using other methods such as CLI or J-Web, see the applicable quick start
guide in the Quick Start Portal.
Your SRX Series rewall is cloud-ready if it has a QR claim code on the front or back panel.
Onboard One SRX Series Firewall Using the Mist AI Mobile App
From your mobile phone:
1. Download and install the Mist AI app from the Google Play Store or Apple App Store.
2. Open the Mist AI app and log in using your account credenals.
You can also link your Juniper support account to your organizaon to view details of all Juniper devices associated
with your account. See "Integrate Your Juniper Support Account With Your Mist Organizaon" on page 4 .
3. Select your organizaon.
4. Tap Claim Devices to Org and focus the camera on the QR code. The app automacally claims the SRX Series rewall
and adds it into your organizaon's inventory.
2

5. On the Organizaon screen, tap Device Inventory → WAN Edges → Unassigned.
6. Select the new SRX rewall. Then tap Primary Site and tap Assign.
To connue onboarding, proceed to "Step 2: Up and Running" on page 5 .
Onboard One or More SRX Series Firewalls Using a Web Browser
Onboarding mulple SRX Series rewalls—When you purchase mulple SRX Series rewalls, we provide you with an
acvaon code along with your PO informaon. Make a note of this code.
Onboarding a single SRX Series rewall—Locate the QR code on your SRX Series rewall and jot down the alphanumeric
claim code directly above it.
1. Log in to your account at hps://manage.mist.com/.
You can also link your Juniper support account to your organizaon to view details of all Juniper devices associated
with your account. See "Integrate Your Juniper Support Account With Your Mist Organizaon" on page 4 .
2. Go to Organizaon → Inventory → WAN Edges and click Claim WAN Edges.
3. Enter the Acvaon code or Claim code.
3

4. Conrm that Assign claimed WAN Edges to site is checked and Primary Site appears below the checkbox.
5. Select Manage conguraon with Mist.
6. Enter a Root Password. This password becomes the root password on each claimed SRX Series rewall.
7. Click Claim.
If you claim mulple rewalls, expect a slight delay for the WAN Edges Claim Results window to pop up.
Review the informaon and Close the window.
8. View your new rewall or rewalls on the Inventory page. The status should show Disconnected.
To complete the onboarding process, see "Step 2: Up and Running" on page 5 .
Integrate Your Juniper Support Account With Your Mist Organizaon
If you have a services contract for your devices, you can view informaon about the devices in the Mist dashboard. To
access this informaon, you must rst link your Juniper support account to your Mist organizaon:
1. In the Mist portal, select Organizaon > Sengs.
2. Under Juniper Account Integraon, click Add Juniper Account.
3. Enter the login credenals for your Juniper account, and then click Add.
Juniper Mist validates the Juniper support account, links it to your Mist organizaon, and populates the Organizaon >
Inventory > Installed Base page with the devices from the specied account. The informaon includes device-specic
details along with the status informaon collected from the devices. You can view the Installed Base informaon and
decide to onboard a device to the Mist cloud. For informaon about the Installed Base page, see View Your Installed
Base.
4

Step 2: Up and Running
IN THIS SECTION
Install the SRX Series Firewall in a Rack | 5
Connect to the Network and Power On the SRX Series Firewall | 5
Install the SRX Series Firewall in a Rack
The rack installaon and power-on procedures vary slightly for each SRX Series rewall. For instrucons specic to your
SRX Series rewall, see the applicable hardware guide on the Juniper Mist Supported Hardware page.
Connect to the Network and Power On the SRX Series Firewall
NOTE: Certain tasks in this procedure require you to congure or connect to services within your local network.
Please be aware that we don't provide instrucons on how to congure or locate these services.
1. Connect the 0/0 port (ge-0/0/0 interface) to the WAN network. The interface receives an IP address from the DHCP
service provided by the ISP.
2. Open ports TCP 443 and TCP 2200 on your Internet rewall to allow outbound communicaon between the SRX
and the Mist cloud. You also need to open port TCP 6514 to allow the SRX to send trac logs to the Mist cloud.
3. Connect an Ethernet cable to any trac (revenue) port on the SRX rewall and to your local network.
4. Connect power to the rewall.
5. Wait for a few minutes for the rewall to boot completely.
The SRX rewall should now appear as green/connected in the Mist portal. Congratulaons! You've successfully
onboarded your cloud-ready SRX Series rewall.
5

Step 3: Keep Going
IN THIS SECTION
What's Next? | 6
General Informaon | 7
Learn with Videos | 7
What's Next?
Use the Mist portal to congure and monitor your SRX rewall for your network. These tables provide links to
addional informaon to help you get started.
If you want to Then
Add a network See Congure Networks for SRX Series Firewalls
Dene applicaons and congure applicaon policies See Congure Applicaons for SRX Series Firewalls and
Congure Applicaon Policies on SRX Series Firewalls
Create a template See Congure WAN Edge Templates for SRX Series Firewalls
Congure Sites See Congure Sites and Variables for SRX Series Firewalls
View and manage your Mist subscripons See Subscripons
Learn about adopng (browneld onboarding) an SRX rewall See Adopt a WAN Edge from Your Juniper Installed Base
Learn how to deploy WAN Assurance See WAN Assurance Conguraon Overview
6

General Informaon
If you want to Then
See all documentaon available for WAN Assurance Visit WAN Assurance Documentaon
Learn about Marvis Visit Marvis Documentaon
See all documentaon available for Junos OS Visit Junos OS Documentaon
See product update informaon Visit Product Updates
Learn with Videos
If you want to Then
See how you can congure an SRX cluster Watch the Conguring an SRX Cluster video
See a demonstraon of how to deploy a branch site using
templates
Watch the Design and Deploy a Branch Site Using Templates
video
Get short and concise ps and instrucons that provide quick
answers, clarity, and insight into specic features and funcons
of Juniper technologies
See Learning with Videos on the Juniper Networks main
YouTube page
View a list of the many free technical trainings we oer at
Juniper
Visit the Geng Started page on the Juniper Learning Portal
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the
United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the
property of their respecve owners. Juniper Networks assumes no responsibility for any inaccuracies in this document.
Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publicaon without noce.
Copyright © 2024 Juniper Networks, Inc. All rights reserved.
7