Juniper SRX 5800, Hardware Manual

Page: 251 / 536

10. Configure the IP address and prefix length for the Ethernet management interface on the services
gateway’s Routing Engine.
[edit]
admin@# set interfaces fxp0 unit 0 family inet address address/prefix-length
11. Configure the traffic interface.
[edit]
admin@# set interfaces ge-6/2/0 unit 0 family inet address address/prefix-length
admin@# set interfaces ge-6/3/5 unit 0 family inet address address/prefix-length
12. Configure the default route.
[edit]
admin@# set routing-options static route 0.0.0.0/0 next-hop gateway
13. Configure basic security zones and bind them to traffic interfaces.
[edit]
admin@# set security zones security-zone trust interfaces ge-6/3/5
admin@# set security zones security-zone untrust interfaces ge-6/2/0
14. Configure basic security policies.
[edit]
admin@# set security policies from-zone trust to-zone untrust policy policy-name match source-address any
destination-address any application any
root@# set security policies from-zone trust to-zone untrust policy policy-name then permit
15. Check the configuration for validity.
[edit]
admin@# commit check
configuration check succeeds
16. Commit the configuration to activate it on the device.
252