Juniper JUNOS J Series User manual

JUNOS Enhanced Services J-series™
Services Router Quick Start
12 October 2007
Part Number: 530-021753–01
Revision 1
JUNOS Enhanced Services J-series Services Routers provide flow-based security
services, IP routing, WAN and LAN connectivity, and management services. Available
in several models, Services Routers typically connect small, branch, or regional offices
to a central site, and link Internet service provider (ISP) networks.
The JUNOS Enhanced Services J-series Services Router Quick Start provides instructions
to initially set up J2320, J2350, J4350, and J6350 Services Routers. You need no
previous JUNOS software experience, but must have managed a network and
configured other routers. For more information, see the JUNOS Enhanced Services
J-series documentation at http://www.juniper.net/techpubs.
Contents What You Need To Know ................................................................................3
Management IP Address ...........................................................................3
J-Web Access ............................................................................................3
CLI Console Access ...................................................................................3
Secure Context and Router Context ..........................................................3
Required Licenses .....................................................................................4
Slot Numbers ............................................................................................4
Interfaces and Ports ..................................................................................4
Remote Access .........................................................................................4
Before You Begin .............................................................................................5
Installing a Services Router .............................................................................6
Installing J2320 and J2350 Services Routers .............................................6
Installing J4350 or J6350 Services Routers ................................................7
Connecting Power to a Services Router ...........................................................8
■1

Basic Connection and Configuration with the J-Web Interface .........................9
Step 1. Connecting, Logging In, and Starting the J-Web Interface .............9
Step 2. Configuring Basic Settings with J-Web Quick Configuration .........10
Step 3. Installing the JUNOS Enhanced Services Software .......................12
Step 4. Adding Licenses with the J-Web Interface ...................................12
Basic Connection and Configuration with the CLI ..........................................12
Step 1. Connecting, Logging In, and Starting the CLI ..............................12
Step 2. Configuring Basic Settings with the CLI .......................................13
Step 3. Installing the JUNOS Enhanced Services Software .......................14
Step 4. Adding Licenses with the CLI ......................................................14
J-Web Basics ..................................................................................................15
JUNOS Enhanced Services CLI Basics ............................................................15
Safety Warnings Summary ............................................................................17
Compliance Statements for NEBS ..................................................................19
Declarations of Conformity ...........................................................................20
JUNOS Enhanced Services and Related Documentation ................................21
Requesting Support .......................................................................................25
Revision History ............................................................................................25
2■
JUNOS Enhanced Services J-series™Services Router Quick Start

What You Need To Know
Management IP Address
When you first connect a management PC or laptop to a built-in Ethernet port on a
Services Router, the router acts as a DHCP client and attempts to perform an
autoinstallation. If it does not find a DHCP server, the router assigns 192.168.1.1/24
as the IP address for port 0. (If you are connected to port 1, 192.168.2.1/24 is
assigned as the IP address. Port 2 and port 3 are assigned 192.168.3.1/24 and
192.168.4.1/24, respectively.)
Because this address is not part of any explicit configuration, it is removed when
you change the configuration in any way. You must configure an IP address for this
LAN port when you commit your initial configuration. (See “Step 2. Configuring Basic
Settings with J-Web Quick Configuration”on page 10 or “Step 2. Configuring Basic
Settings with the CLI”on page 13.)
J-Web Access
The Web interface to the router—called the J-Web interface—is enabled by default.
To configure the router with the Web interface, you attach a PC or laptop to a built-in
Ethernet port. The examples in this document use the first built-in Gigabit Ethernet
port 0/0 (internally named ge-0/0/0).
See “Step 1. Connecting, Logging In, and Starting the J-Web Interface”on page 9.
CLI Console Access
Services Routers are shipped with a console cable and adapter. To configure a Services
Router through the console port with the JUNOS Enhanced Services command-line
interface (CLI), you use a terminal emulation program such as Microsoft Windows
HyperTermimal. (See “Step 1. Connecting, Logging In, and Starting the
CLI”on page 12.)
Secure Context and Router Context
You can operate the router either in secure context or router context. These contexts
are meant to be starting points from which you can customize the configuration for
your network requirements. By default, the Services Router operates in secure context.
For information describing how to change contexts, see the JUNOS Enhanced Services
Administration Guide.
The basic configuration for secure context binds the ge-/0/0/0 interface to a
preconfigured zone called trust. All other interfaces are bound to a preconfigured
untrust zone. The ge-0/0/0 interface has SSH and HTTP services enabled for
management access. These services as well as Telnet, HTTPS, and DHCP are
configured as host-inbound services for the ge-0/0/0 interface. For the trust zone,
TCP Reset is also enabled. The default policy for the trust zone allows transmission
of traffic from the trust zone to the untrust zone. All traffic within the trust zone is
allowed.
What You Need To Know ■3
What You Need To Know

To protect against attacks launched from within the zone, the following screens are
enabled for the untrust zone: ICMP ping-of-death, IP source route options, IP teardrop,
TCP land attack, and TCP SYN flood. The default policy for the untrust zone denies
all traffic.
In router context, all transit traffic security checks are disabled. The default policy
allows all transit traffic, and all interfaces are bound to the trust zone.
Required Licenses
To use the following features on a Services Router, you must purchase a license. (See
“Step 4. Adding Licenses with the CLI”on page 14 or “Step 2. Configuring Basic
Settings with J-Web Quick Configuration”on page 10.)
■Advanced Border Gateway Protocol (BGP) support for route reflectors
■J-Flow traffic analysis
For these features, the presence on the router of the appropriate software license
keys (passwords) determines whether you can use the feature. You must install and
properly configure the license. The router allows you to commit a configuration with
a feature that requires a license even if the license is not present, but you are
prohibited from actually using the feature.
Slot Numbers
The J-series Services Routers have the following slots for replaceable Physical Interface
Modules (PIMs). PIM slots are numbered from top to bottom and left to right.
■J2320 Services Routers—Slots 1 through 3.
■J2350 Services Routers—Slots 1 through 5
■J4350 and J6350 Services Routers—Slots 1 through 6.
Interfaces and Ports
Interfaces are named by type, slot number, module number (always 0), and port
number. Port numbering starts with 0. For example:
■The built-in Gigabit Ethernet LAN ports 0/0 through 0/3, which are in slot 0, are
named ge-0/0/0, ge-0/0/1, ge-0/0/2, and ge-0/0/3.
■The first port on a T1 PIM in slot 1 is named t1-1/0/0.
Remote Access
Although HTTP and SSH are supported, they are disabled by default.
4■What You Need To Know
JUNOS Enhanced Services J-series™Services Router Quick Start

Before You Begin
Before installing and connecting a Services Router, read “Safety Warnings
Summary”on page 17.
Then make sure you have the equipment listed in Table 1 on page 5.
Table 1: Equipment Required for Services Router Installation
Management AccessRack InstallationElectrical Connection
For CLI access:
■Management device, such as a PC
or laptop, with a serial port (not
provided)
■RJ-45 console (Ethernet “rollover”)
cable, with an RJ-45-to-DB-9
adapter (both provided)
For J-Web access:
■Management device, such as a PC
or laptop, with an Ethernet port
(not provided)
■Ethernet cable (not provided)
■For rack installation,
mounting screws
appropriate for your rack
and an appropriate
screwdriver (not provided).
■Mounting brackets are
preinstalled on J2320 and
J2350 models, and must be
installed on J4350 and J6350
models.
■Electrostatic discharge (ESD) grounding
strap (not provided)
■For AC power, an AC power cord with a
plug appropriate for your geographical
location (provided)
■For DC power, 14 AWG DC power cables
with appropriate lugs (not provided)
■For grounding, 14 AWG grounding cable
and lug for the router (not provided)
■Routers with redundant power supplies
require an AC power cord (provided) or DC
power cables (not provided) for each power
supply.
CAUTION: A licensed electrician must attach a cable lug to the grounding and power
cables that you supply. A cable with an incorrectly attached lug can damage the
router.
If you are installing a J4350 or J6350 Services Router, take the following steps:
1. Attach the air filter and filter cover, as shown in Figure 1 on page 5.
Figure 1: Attaching Air Filter and Filter Cover
Before You Begin ■5
Before You Begin

2. Attach the mounting brackets to either the center or front of the chassis, as
shown in Figure 2 on page 6.
Figure 2: Attaching Mounting Brackets
Installing a Services Router
WARNING: DC-powered Services Routers are intended for installation in a restricted
access location.
Installing J2320 and J2350 Services Routers
To install the J2320 and J2350 router into a rack:
1. Have one person grasp the sides of the router, lift the router, and position it in
the rack.
2. Align the top hole in each mounting bracket with a hole in each rack rail as shown
in Figure 3 on page 6 and Figure 4 on page 7, making sure the chassis is level.
Figure 3: Hanging a J2320 Router in a Rack
6■Installing a Services Router
JUNOS Enhanced Services J-series™Services Router Quick Start

Figure 4: Hanging a J2350 Router in a Rack
3. Have a second person install a mounting screw into each of the two aligned
holes. With a number 2 Phillips screwdriver, tighten the screws.
4. Verify that the mounting screw on one side of the rack is aligned with the
mounting screw on the opposite side and that the router is level.
5. Install the second screw in each mounting bracket.
Installing J4350 or J6350 Services Routers
To install a J4350 or J6350 Services Router in a rack:
1. Make sure the rack is properly secured to the building in its permanent location.
2. Attach a screw to each rack rail in the third hole down from where you want the
top of the router to be positioned, as shown in Figure 5 on page 8. Screw only
part way in, leaving about 1/4 in. (6 mm) distance between the screw head and
the rail.
3. Lift the router and insert the elliptical openings in the mounting brackets onto
the partially inserted screws so that the router is hanging from the two screws.
Installing a Services Router ■7
Installing a Services Router

Figure 5: Hanging the Router in the Rack
4. Install at least two mounting screws into each mounting bracket, in addition to
the center screws from which the router hangs.
Connecting Power to a Services Router
J2320, J2350, and J4350 Services Routers have a fixed power supply. J6350 Services
Routers have field-replaceable AC or DC power supplies.
To connect AC or DC power:
1. Connect the router to earth ground with a 14 AWG grounding cable:
a. Connect one end to a proper earth ground point (the rack, for example).
b. Remove the screw and washer from the PEM nut on the protective earthing
terminal at the rear of the router chassis. (The J4350 and J6350 chassis have
two PEM nuts.)
c. Secure the other end of the cable to this grounding point with the washer
and then with the screw.
2. For an AC power supply only:
a. Insert the appliance coupler end of the power cord into the appliance inlet
on the router's power supply faceplate.
b. Insert the plug into an AC power source receptacle.
8■Connecting Power to a Services Router
JUNOS Enhanced Services J-series™Services Router Quick Start

c. If the power supply includes a on/off switch, turn the switch to on.
3. For a DC power supply only:
a. Ensure that the voltage across the DC power source cable leads is 0 volts
and that the cable leads cannot become active during installation.
b. Remove the clear plastic cover protecting the terminal block.
c. Remove the two center screws next to the labels –48 VDC and RTN.
d. Secure the positive (+) DC source power cable lug to the RTN terminal,
tightening the screw only until snug. Do not overtighten.
e. Secure the negative (–) DC source power cable lug to the –48 VDC terminal,
tightening the screw only until snug. Do not overtighten.
f. Replace the plastic cover.
4. Repeat Step 2 or Step 3 for the second power supply, if one is installed.
For complete instructions, see the JUNOS Enhanced Services J-series Services Router
Getting Started Guide.
Basic Connection and Configuration with the J-Web Interface
For J-Web access, you connect from your management PC or laptop to the Services
Router through one of the built-in Ethernet interfaces. The examples in this document
use port 0/0. (For information about the J-Web interface, see “J-Web
Basics”on page 15.)
Step 1. Connecting, Logging In, and Starting the J-Web Interface
When the Services Router is powered on for the first time, it searches for a DHCP
server, and if it does not find one, it assigns an IP address within the 192.168.1.0/24
subnetwork to any devices connected to it.
To connect to the J-Web interface through port 0/0 on the router:
1. On the management device, such as a PC or laptop, you use to access the J-Web
interface, verify that the address of the port that you connect to the router is set
to one of the following:
■An Ethernet address on the 192.168.1/24 subnetwork other than
192.168.1.1
■An Ethernet address from a DHCP server
2. Turn off the power to the management device.
3. Plug one end of the Ethernet cable into the Ethernet port on the management
device.
4. Connect the other end of the Ethernet cable to the built-in Ethernet port on the
router.
Basic Connection and Configuration with the J-Web Interface ■9
Basic Connection and Configuration with the J-Web Interface

5. Power on the router by pressing the power button on the front panel.
6. Wait until the STATUS LED on the front panel turns solid green.
7. Turn on the power to the management device. The router assigns an IP address
to the management device within the 192.168.1/24 subnetwork if the device
is configured to use DHCP.
8. From the management device, open a Web browser and enter the IP address
192.168.1.1 in the address field. The Set Up Quick Configuration page appears.
NOTE: You must manually configure the IP address for the management port you
are using before you save your initial configuration. When you save the configuration
for the first time, the DHCP lease is lost and you will lose the connection to the router
if you have not manually configured the IP address. If you lose connection through
the management interface, you must connect through the console port.
Step 2. Configuring Basic Settings with J-Web Quick Configuration
When you click OK or Apply on J-Web Quick Configuration pages, the configuration
is saved and activated automatically. To configure basic settings with the J-Web
interface:
1. If the Set Up Quick Configuration page is not displayed, select
Configuration>Quick Configuration >Set Up.
2. Enter information in the boxes on the Set Up Quick Configuration page as shown
in Table 2 on page 10, then click OK or Apply.
Table 2: J-Web Set Up Quick Configuration
DescriptionField
Hostname of the router—for example, Chicago.
Host Name (required)
Network or subnetwork that the router belongs to.Domain Name
Root password that user “root”can use to log in to the router.Root Password (required)
Retyped password.Verify Root Password (required)
Time zone in which the router is located.Time Zone
NTP server to synchronize the system time.NTP Servers
Your current time and date.Current System Time
DNS server to resolve hostnames into addresses.DNS Name Servers
Name of each domain to include in a DNS search.Domain Search
Default route. The IP address of a default router that the Services Router can use
to direct packets addressed to networks not explicitly listed in the routing table.
Default Gateway
10 ■Basic Connection and Configuration with the J-Web Interface
JUNOS Enhanced Services J-series™Services Router Quick Start